Heap Overflow Vulnerability in Autodesk Navisworks Due to Malicious DWFX Files

CVE-2024-12669

What is CVE-2024-12669?

CVE-2024-12669 describes a critical heap-based overflow vulnerability present in Autodesk Navisworks, triggered by the processing of specially crafted DWFX files. When a malicious actor exploits this vulnerability, it can lead to severe consequences including application crashes, unauthorized access to sensitive information, and the potential for arbitrary code execution in the running process. Users of affected versions should apply necessary security updates to mitigate the risks associated with this vulnerability.

References