Autodesk

Revit

40 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2025-1275

  • EPSS 0.37%
  • Veröffentlicht 15.04.2025 20:54:30
  • Zuletzt bearbeitet 19.08.2025 13:15:39

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary c...

5.5

CVE-2024-11268

  • EPSS 0.17%
  • Veröffentlicht 09.12.2024 18:15:22
  • Zuletzt bearbeitet 18.08.2025 21:15:29

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak.

7.8

CVE-2024-11454

  • EPSS 0.2%
  • Veröffentlicht 09.12.2024 18:15:22
  • Zuletzt bearbeitet 26.09.2025 17:48:10

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.

7.8

CVE-2024-11608

  • EPSS 0.2%
  • Veröffentlicht 09.12.2024 18:15:22
  • Zuletzt bearbeitet 26.09.2025 17:51:58

A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context...

7.8

CVE-2024-7994

  • EPSS 0.21%
  • Veröffentlicht 16.10.2024 22:15:03
  • Zuletzt bearbeitet 21.10.2024 18:35:55

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the curr...

7.8

CVE-2024-7993

  • EPSS 0.2%
  • Veröffentlicht 16.10.2024 22:15:03
  • Zuletzt bearbeitet 26.09.2025 17:48:02

A maliciously crafted PDF file, when parsed through Autodesk Revit, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of...

7.8

CVE-2024-37008

  • EPSS 0.24%
  • Veröffentlicht 21.08.2024 10:15:05
  • Zuletzt bearbeitet 23.08.2024 16:57:34

A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

7.8

CVE-2023-25002

  • EPSS 0.35%
  • Veröffentlicht 27.06.2023 23:15:09
  • Zuletzt bearbeitet 21.11.2024 07:48:54

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

7.8

CVE-2023-29068

  • EPSS 0.24%
  • Veröffentlicht 27.06.2023 19:15:09
  • Zuletzt bearbeitet 21.11.2024 07:56:29

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

7.8

CVE-2023-25004

  • EPSS 0.24%
  • Veröffentlicht 27.06.2023 19:15:09
  • Zuletzt bearbeitet 21.11.2024 07:48:54

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.