High severity7.8NVD Advisory· Published Dec 17, 2024· Updated Jun 17, 2026
CVE-2024-11422
CVE-2024-11422
Description
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Affected products
4cpe:2.3:a:autodesk:navisworks_freedom:2025:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:autodesk:navisworks_freedom:2025:*:*:*:*:*:*:*range: 2025
- cpe:2.3:a:autodesk:navisworks_manage:2025:*:*:*:*:*:*:*range: 2025
- cpe:2.3:a:autodesk:navisworks_simulate:2025:*:*:*:*:*:*:*range: 2025
- (no CPE)
Patches
Vulnerability mechanics
References
1- www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027nvdVendor Advisory
News mentions
0No linked articles in our index yet.