High severity7.8NVD Advisory· Published Dec 17, 2024· Updated Jun 17, 2026
CVE-2024-12669
CVE-2024-12669
Description
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Affected products
4cpe:2.3:a:autodesk:navisworks_freedom:2025:*:*:*:*:windows:*:*+ 3 more
- cpe:2.3:a:autodesk:navisworks_freedom:2025:*:*:*:*:windows:*:*range: 2025
- cpe:2.3:a:autodesk:navisworks_manage:2025:*:*:*:*:windows:*:*range: 2025
- cpe:2.3:a:autodesk:navisworks_simulate:2025:*:*:*:*:windows:*:*range: 2025
- (no CPE)
Patches
Vulnerability mechanics
References
1- www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027nvdVendor Advisory
News mentions
0No linked articles in our index yet.