Out-of-Bounds Write Vulnerability in Autodesk Navisworks
CVE-2024-12198

7.8HIGH

Key Information:

Vendor
Autodesk
Status
Navisworks Freedom
Navisworks Simulate
Navisworks Manage
Vendor
CVE Published:
17 December 2024

Summary

CVE-2024-12198 identifies a significant out-of-bounds write vulnerability in Autodesk Navisworks. When processing a specifically crafted DWFX file, the software can be manipulated to execute out-of-bounds writes. This may result in unexpected behavior such as crashes, potential data corruption, and in certain circumstances, the execution of arbitrary code within the context of the current user process. This vulnerability poses a substantial risk to users and organizations utilizing affected versions of Navisworks, thereby highlighting the importance of applying security updates provided by Autodesk.

Affected Version(s)

Navisworks Freedom 2025 < 2025.4

Navisworks Manage 2025 < 2025.4

Navisworks Simulate 2025 < 2025.4

References

https://www.autodesk.com/trust/security-advisories/adsk-s...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.