Malicious DWF File Can Trigger Heap-Based Buffer Overflow in Autodesk Navisworks

CVE-2024-7674

What is CVE-2024-7674?

A vulnerability exists in Autodesk Navisworks related to the processing of maliciously crafted DWF files through the dwfcore.dll module. An attacker can exploit this vulnerability to trigger a heap-based buffer overflow, which may lead to application crashes or the execution of arbitrary code within the affected process context. Proper input validation and strict handling of DWF files are essential to mitigate potential risks associated with this vulnerability.

References