CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-12191

Medium Severity
SVRS
30/100

CVSSv3
NA/10

EPSS
0.00049/1

CVE-2024-12191: Out-of-Bounds Write vulnerability in Autodesk Navisworks. Parsing a maliciously crafted DWFX file can trigger this issue. While the CVSS score is 0, indicating low base severity, the SVRS is 30. This Autodesk Navisworks vulnerability (CVE-2024-12191) could allow attackers to cause a program crash or data corruption. An attacker could potentially achieve arbitrary code execution by exploiting this weakness. Users should apply available patches to mitigate the risk of exploitation. Although not currently critical based on the SVRS, monitoring is advised due to the 'In The Wild' tag. The potential for arbitrary code execution makes this a significant security concern that warrants attention.

In The Wild
2024-12-17

2025-02-10

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CVE-2024-12191 | Autodesk Navisworks Freedom 2025 DWFX File out-of-bounds write (Nessus ID 213280)
vuldb.com2025-02-17
CVE-2024-12191 | Autodesk Navisworks Freedom 2025 DWFX File out-of-bounds write (Nessus ID 213280) | A vulnerability was found in Autodesk Navisworks Freedom, Navisworks Simulate and Navisworks Manage 2025. It has been classified as critical. This affects an unknown part of the component DWFX File Handler. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2024-12191
vuldb.com
rss
forum
news
ZDI-24-1704: Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
2024-12-19
ZDI-24-1704: Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-12191.
zerodayinitiative.com
rss
forum
news
CVE-2024-12191 | Autodesk Navisworks Freedom 2025 DWFX File out-of-bounds write
vuldb.com2024-12-17
CVE-2024-12191 | Autodesk Navisworks Freedom 2025 DWFX File out-of-bounds write | A vulnerability was found in Autodesk Navisworks Freedom, Navisworks Simulate and Navisworks Manage 2025. It has been classified as critical. This affects an unknown part of the component DWFX File Handler. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2024-12191. It is possible
vuldb.com
rss
forum
news

Social Media

CVE-2024-12191 Out-of-Bounds Write Vulnerability in Autodesk Navisworks through DWFX File An Out-of-Bounds Write vulnerability can happen in Autodesk Navisworks when a crafted DWFX file is parsed. A bad actor can... https://t.co/ZFmQUS2tnS
0
0
0

Affected Software

No affected software found for this CVE

References

ReferenceLink
[email protected]https://autodesk.com/trust/security-advisories/adsk-sa-2024-0027
[email protected]https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027
GITHUBhttps://autodesk.com/trust/security-advisories/adsk-sa-2024-0027

CWE Details

CWE IDCWE NameDescription
CWE-787Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence