CVE-2025-5036 RFA File Parsing Use-After-Free Vulnerability

A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5036 RFA File Parsing Use-After-Free Vulnerability

A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5036

Autodesk Revit is affected by CVE-2025-5036 due to a Use-After-Free in RFA file parsing. A maliciously crafted RFA file linked or imported into Revit can crash the process, read sensitive data, or execute arbitrary code in the current process. Exploitation requires user interaction and local acce...

Autodesk Revit 资源管理错误漏洞

Autodesk Revit is a suite of building information modeling software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Revit that stems from reuse after release and could lead to arbitrary code execution...

PT-2025-23545 · Autodesk · Autodesk Revit

Name of the Vulnerable Software and Affected Versions: Autodesk Revit affected versions not specified Description: A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free issue. This can be leveraged by a malicious actor to cause a crash, read...

PT-2025-31241 · Autodesk · Autodesk Products

Name of the Vulnerable Software and Affected Versions: Autodesk products affected versions not specified Description: A maliciously crafted PRT file, when linked or imported into certain Autodesk products, can trigger an Out-of-Bounds Read. An attacker can exploit this to cause a crash, read...

PT-2025-31244 · Autodesk · Autodesk Products

Name of the Vulnerable Software and Affected Versions: Autodesk products affected versions not specified Description: A maliciously crafted PRT file, when parsed, can cause an Out-of-Bounds Write. This can lead to a crash, data corruption, or arbitrary code execution within the current process...

PT-2025-31240 · Autodesk · Autodesk Products

Name of the Vulnerable Software and Affected Versions: Autodesk products affected versions not specified Description: A maliciously crafted PRT file, when parsed, can lead to an Out-of-Bounds Write. This can allow a malicious actor to cause a crash, corrupt data, or execute arbitrary code within...

PT-2025-31242 · Autodesk · Autodesk Products

Name of the Vulnerable Software and Affected Versions: Autodesk products affected versions not specified Description: A maliciously crafted PRT file, when parsed, can trigger a Use-After-Free vulnerability. This allows a malicious actor to potentially cause a crash, read sensitive data, or execut...

PT-2025-31243 · Autodesk · Autodesk Products

Name of the Vulnerable Software and Affected Versions: Autodesk products affected versions not specified Description: A maliciously crafted PRT file, when parsed, can lead to an Out-of-Bounds Write. This can result in a crash, data corruption, or arbitrary code execution within the current proces...

PT-2025-31245 · Autodesk · Autodesk Products

Name of the Vulnerable Software and Affected Versions: Autodesk products affected versions not specified Description: A maliciously crafted 3DM file, when parsed, can lead to an Out-of-Bounds Write. This can allow a malicious actor to cause a crash, corrupt data, or execute arbitrary code within...

CVE-2024-11268

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...

CVE-2023-29076

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2023-41139

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2023-41140

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2023-41145

Autodesk users who no longer have an active license for an account can still access cases for that account...

CVE-2023-29067

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2023-27915

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2023-27911

A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution...

CVE-2023-27914

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the...