CVE-2024-12669 — DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

CVE-2024-12669

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software PUBLISHED

Description (CNA)

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Autodesk / Navisworks Freedom	affected 2025 before 2025.4
Autodesk / Navisworks Simulate	affected 2025 before 2025.4
Autodesk / Navisworks Manage	affected 2025 before 2025.4

CWE

CWE-122

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.