CVE-2024-11608

CVE-2024-11608 relates to Autodesk Revit and is triggered by a maliciously crafted SKP file that is linked or imported into Revit, leading to a heap-based overflow. The vulnerability can allow a crash, reading of sensitive data, or execution of arbitrary code within the current process. Descripti...

CVE-2024-11454

CVE-2024-11454 is an untrusted search path vulnerability in Autodesk Revit. A maliciously crafted DLL placed in the same directory as an RVT file could be loaded by Revit, allowing arbitrary code execution in the current process due to an untrusted search path being used. The available documents ...

CVE-2024-11454 Untrusted Search Path vulnerability in Autodesk Revit

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized...

CVE-2024-11454 Untrusted Search Path vulnerability in Autodesk Revit

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized...

CVE-2024-11268

CVE-2024-11268 concerns Autodesk Revit. A maliciously crafted PDF parsed by Revit can trigger an Out-of-Bounds Read, with the impact described as a crash or arbitrary memory leak. Documented measurements assign a Medium base score (CVSS 3.1) with local attack vector and user interaction required....

CVE-2024-11268 PDF File Parsing Vulnerability in Autodesk Revit

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...

CVE-2024-11268 PDF File Parsing Vulnerability in Autodesk Revit

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...

CVE-2023-7298

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2023-7298 Out-of-Bounds Write Vulnerability in in Autodesk Desktop Software

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2023-7298 Out-of-Bounds Write Vulnerability in in Autodesk Desktop Software

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2023-7298

CVE-2023-7298 concerns Autodesk FBX SDK. A crafted FBX file can trigger an Out-of-Bounds Write in the FBX parser, enabling a attacker to crash the process, corrupt data, or potentially execute arbitrary code in the affected product. Documented impacts include crash, data integrity risks, and remo...

Autodesk Revit 代码问题漏洞

Autodesk Revit is a suite of building information modeling software from the American company Autodesk. A security vulnerability exists in Autodesk Revit that stems from the fact that if a maliciously crafted DLL file is placed in the same directory as an RVT file, Autodesk Revit may load the fil...

CVE-2024-11608: Heap-based Buffer Overflow

A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

PT-2024-17005 · Autodesk · Autodesk Revit

Name of the Vulnerable Software and Affected Versions: Autodesk Revit affected versions not specified Description: The issue allows a maliciously crafted DLL file to be loaded by Autodesk Revit when placed in the same directory as an RVT file, potentially executing arbitrary code in the context o...

PT-2024-16873 · Autodesk · Autodesk Revit

Name of the Vulnerable Software and Affected Versions: Autodesk Revit affected versions not specified Description: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. This issue can be leveraged by a malicious actor to cause a crash or could lead t...

PT-2024-15278 · Autodesk · Autodesk Fbx-Sdk

Name of the Vulnerable Software and Affected Versions: Autodesk FBX SDK affected versions not specified Description: A maliciously crafted FBX file, when parsed through the Autodesk FBX SDK, may force an Out-of-Bounds Write issue. This could allow a malicious actor to cause a crash, data...

PT-2024-17134

Name of the Vulnerable Software and Affected Versions Autodesk Revit affected versions not specified Description A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can cause a Heap-based Overflow. This can be leveraged by a malicious actor to cause a crash, read sensitiv...

Autodesk Revit 缓冲区错误漏洞

Autodesk Revit is a suite of building information modeling software from the US company Autodesk. A security vulnerability exists in Autodesk Revit that originates when Autodesk Revit parses a maliciously crafted PDF file, potentially forcing an out-of-bounds read. An attacker can exploit this...

CVE-2024-11268: Out-of-bounds Read

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...

CVE-2023-7298: Out-of-bounds Write

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...