Heap Overflow Vulnerability in Autodesk Navisworks Due to Malicious DWF Files

CVE-2024-12670

Summary

CVE-2024-12670 is a critical heap-based overflow vulnerability found in Autodesk Navisworks, specifically triggered by processing maliciously crafted DWF files. When exploited, this vulnerability allows an attacker to potentially execute arbitrary code, leading to crashes or unauthorized access to sensitive information in the context of the application. Users of affected Autodesk Navisworks versions are urged to apply security patches and adhere to best practices to mitigate the associated risks. Detailed information and remediation steps can be found in the Autodesk security advisory.

References