Lucene search
+L

49 matches found

Zero Day Initiative
Zero Day Initiative
•added 2025/07/15 12:00 a.m.•15 views

Autodesk Revit RFA File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Revit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RFA...

7.8CVSS6.2AI score0.00363EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/07/15 12:00 a.m.•14 views

Autodesk Revit RFA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Revit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RFA...

7.8CVSS7.2AI score0.00363EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/07/15 12:00 a.m.•13 views

Autodesk Revit RFA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Revit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RFA...

7.8CVSS7.2AI score0.00363EPSS
SaveExploits0References1
OSV
OSV
•added 2025/07/10 12:15 p.m.•13 views

CVE-2025-5037

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS6.2AI score0.00363EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/07/10 11:30 a.m.•24 views

CVE-2025-5037 RFA File Parsing Memory Corruption Vulnerability

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS0.00363EPSS
SaveExploits0References2
CVE
CVE
•added 2025/07/10 11:30 a.m.•70 views

CVE-2025-5037

CVE-2025-5037 affects Autodesk Revit; a maliciously crafted RFA/RTE/RVT file can trigger a memory corruption vulnerability, enabling arbitrary code execution in the current process. The CVSS vector in the initial entry indicates local access, user interaction required, and high impact to confiden...

7.8CVSS7.1AI score0.00363EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/10 11:30 a.m.•7 views

CVE-2025-5037 RFA File Parsing Memory Corruption Vulnerability

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS7.1AI score0.00363EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/10 12:00 a.m.•2 views

CVE-2025-5037: Buffer Copy without Checking Size of Input

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS6.5AI score0.00363EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/10 12:00 a.m.•17 views

PT-2025-29079

Autodesk Revit and Affected Versions Autodesk Revit affected versions not specified Description Autodesk Revit is susceptible to a flaw related to the parsing of RFA, RTE, and RVT files. A specially crafted malicious file, when processed by Autodesk Revit, can lead to a memory corruption issue...

7.8CVSS7.7AI score0.00363EPSS
SaveExploits0References19
Zero Day Initiative
Zero Day Initiative
•added 2025/06/06 12:00 a.m.•23 views

Autodesk Revit RFA File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Revit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RFA...

7.8CVSS7.2AI score0.00199EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/04 5:14 p.m.•29 views

CVE-2025-5036

A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.00199EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/02 4:55 p.m.•37 views

CVE-2025-5036 RFA File Parsing Use-After-Free Vulnerability

A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00199EPSS
SaveExploits0References2
CVE
CVE
•added 2025/06/02 4:55 p.m.•99 views

CVE-2025-5036

Autodesk Revit is affected by CVE-2025-5036 due to a Use-After-Free in RFA file parsing. A maliciously crafted RFA file linked or imported into Revit can crash the process, read sensitive data, or execute arbitrary code in the current process. Exploitation requires user interaction and local acce...

7.8CVSS7.7AI score0.00199EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/06/02 4:55 p.m.•10 views

CVE-2025-5036 RFA File Parsing Use-After-Free Vulnerability

A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.00199EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/02 12:00 a.m.•1 views

CVE-2025-5036: Use After Free

A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.00199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/29 12:00 a.m.•3 views

CVE-2025-5325: Improper Neutralization of Special Elements Used in a Template Engine

A vulnerability has been found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /adpweb/a/ica/api/service/rfa/testService. The manipulation leads to improper neutralization of...

9.8CVSS6.1AI score0.00507EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/10/18 12:00 a.m.•36 views

Autodesk Revit 2022.x < 2022.1.8 / 2023.x < 2023.1.6 / 2024.x < 2024.3 / 2025.x < 2025.3 RFA File Parsing Buffer Overflow (ADSK-SA-2024-0017)

The version of Autodesk Revit installed on the remote Windows host is 2022.x prior to 2022.1.8, 2023.x prior to 2023.1.6, 2024.x prior to 2024.3, or 2025.x prior to 2025.3. It is, therefore, affected by a stack-based buffer overflow vulnerability: - A maliciously crafted RFA file, when parsed...

7.8CVSS6.4AI score0.00214EPSS
SaveExploits0References2
OSV
OSV
•added 2024/10/16 10:15 p.m.•28 views

CVE-2024-7994

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS6.1AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/16 10:15 p.m.•39 views

CVE-2024-7994

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/16 9:47 p.m.•36 views

CVE-2024-7994 Stack-Based Buffer Overflow Vulnerability in Autodesk Revit

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00214EPSS
SaveExploits0References1
Rows per page
Query Builder