Autodesk Navisworks Vulnerability Could Lead to Crash, Data Theft or Code Execution

CVE-2024-7670

What is CVE-2024-7670?

A vulnerability exists in Autodesk Navisworks that can be exploited when a specially crafted DWFX file is processed by the w3dtk.dll component. This flaw may allow an attacker to induce an Out-of-Bounds Read condition, potentially leading to a crash of the application. Such an event can expose sensitive information or allow malicious code execution within the context of the affected process. Users are advised to apply the latest security patches and follow recommended practices to mitigate risks associated with this vulnerability.

References