CVE-2025-8354

CVE-2025-8354 affects Autodesk Revit via a parsing-type confusion in RFA files. The vulnerability is triggered by a maliciously crafted RFA file, with exploitation described as leading to a crash, data corruption, or arbitrary code execution in the current process. CVSS 3.1 indicates a Local atta...

CVE-2025-8354 RFA File Parsing Type Confusion Vulnerability

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Type Confusion vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

Autodesk Revit 安全漏洞

Autodesk Revit is a suite of building information modeling software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Revit that originates from a type confusion when parsing a specially crafted RFA file, which could result in a crash, data corruption, or...

PT-2025-39171

Name of the Vulnerable Software and Affected Versions Autodesk Revit affected versions not specified Description A specially designed RFA file, when processed by Autodesk Revit, can lead to a Type Confusion condition. An attacker could potentially exploit this to cause the application to crash,...

Autodesk Revit RFA File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Revit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RFA...

Autodesk Revit 2024 < 2024.3.4 / 2025 < 2025.4.3 / 2026 < 2026.3 Multiple Vulnerabilities (adsk-sa-2025-0018)

The version of Autodesk Revit installed on the remote host is 2024 prior to 2024.3.4, 2025 prior to 2025.4.3, or 2026 prior to 2026.3. It is, therefore, affected by multiple vulnerabilities as referenced in the adsk-sa-2025-0014 advisory: - A maliciously crafted PDF file, when parsed through...

Autodesk Revit 安全漏洞

Autodesk Revit is a suite of building information modeling software from the American company Autodesk. A security vulnerability exists in Autodesk Revit that originates from a heap buffer overflow when parsing specially crafted PDF files, which could lead to a crash, read sensitive data, or...

Autodesk Revit 安全漏洞

Autodesk Revit is a suite of building information modeling software from the American company Autodesk. A security vulnerability exists in Autodesk Revit that originates from an out-of-bounds write when parsing a specially crafted PDF file, which could result in a crash, data corruption, or the...

Autodesk Revit 2026 < 2026.0.2 Untrusted Search Path (adsk-sa-2025-0014)

The version of Autodesk Revit installed on the remote host is 2026 prior to 2026.0.2. It is, therefore, affected by a vulnerability as referenced in the adsk-sa-2025-0014 advisory. - A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead t...

CVE-2025-5042

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

Autodesk多款产品 安全漏洞

Autodesk Revit and others are products of the American company Autodesk.Autodesk Revit is a suite of building information modeling software. Autodesk Infrastructure Parts Editor is a parametric shape editing tool.Autodesk Navisworks Manage is a project review platform. A security vulnerability...

CVE-2025-5042

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5042

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5042 RFA File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5042 RFA File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5042

CVE-2025-5042 concerns Autodesk Revit. A maliciously crafted RFA file parsed by Revit can trigger an Out-of-Bounds Read, potentially crashing the process, reading sensitive data, or executing arbitrary code in the current process context. This is evidenced across multiple connected sources descri...

Autodesk Revit 缓冲区错误漏洞

Autodesk Revit is a suite of building information modeling software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk Revit that originates from parsing specially crafted RFA files that may result in out-of-bounds reads, which could lead to a crash, sensitive dat...

PT-2025-30437 · Autodesk · Autodesk Revit

Name of the Vulnerable Software and Affected Versions: Autodesk Revit affected versions not specified Description: A maliciously crafted RFA file, when parsed through Autodesk Revit, can trigger an Out-of-Bounds Read issue. A malicious actor could potentially leverage this issue to cause a crash,...

Autodesk Revit RFA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Revit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RFA...

Autodesk Revit 2023.x < 2023.1.8 / 2024.x < 2024.3.3 / 2025.x < 2025.4.2 / 2026.x < 2026.2 Mutliple Vulnerabilities (ADSK-SA-2025-0012)

The version of Autodesk Revit installed on the remote host is prior to 2023.1.8 / 2024.3.3 / 2025.4.2 / 2026.2.0. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability....