What is the severity of CVE-2024-12671?

CVE-2024-12671 is a critical severity vulnerability due to its potential for out-of-bounds write, which can lead to crashes or code execution.

How do I fix CVE-2024-12671?

To mitigate CVE-2024-12671, users should update to the latest version of Autodesk Navisworks as per the vendor's security advisory.

What type of attack exploits CVE-2024-12671?

CVE-2024-12671 can be exploited through a maliciously crafted DWFX file that, when opened, triggers the out-of-bounds write vulnerability.

What are the impacts of CVE-2024-12671?

The impacts of CVE-2024-12671 include the possibility of application crashing, data corruption, and arbitrary code execution on affected systems.

Is CVE-2024-12671 specific to any version of Autodesk Navisworks?

CVE-2024-12671 affects all versions of Autodesk Navisworks that can process DWFX files.

Vulnerability/
CVE-2024-12671

high

7.8

CWE

787

17/12/2024

8/5/2025

CVE-2024-12671: DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

First published: Tue Dec 17 2024(Updated: )

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Credit: psirt@autodesk.com

Affected Software	Affected Version	How to fix
Autodesk Navisworks
Autodesk Navisworks	>=2025<2025.4

Never miss a vulnerability like this again

Reference Links

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027

Frequently Asked Questions

What is the severity of CVE-2024-12671?
CVE-2024-12671 is a critical severity vulnerability due to its potential for out-of-bounds write, which can lead to crashes or code execution.
How do I fix CVE-2024-12671?
To mitigate CVE-2024-12671, users should update to the latest version of Autodesk Navisworks as per the vendor's security advisory.
What type of attack exploits CVE-2024-12671?
CVE-2024-12671 can be exploited through a maliciously crafted DWFX file that, when opened, triggers the out-of-bounds write vulnerability.
What are the impacts of CVE-2024-12671?
The impacts of CVE-2024-12671 include the possibility of application crashing, data corruption, and arbitrary code execution on affected systems.
Is CVE-2024-12671 specific to any version of Autodesk Navisworks?
CVE-2024-12671 affects all versions of Autodesk Navisworks that can process DWFX files.

agent/title
agent/weakness
agent/first-publish-date
agent/type
agent/severity
agent/author
agent/event
agent/trending
agent/source
agent/references
collector/mitre-cve
source/MITRE
agent/tags
agent/last-modified-date
agent/description
agent/guess-ai
agent/software-canonical-lookup
agent/softwarecombine
collector/nvd-api
source/NVD
vendor/autodesk
canonical/autodesk navisworks
version/autodesk navisworks/2025

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.