7.8
High
CVE-2024-37008 A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow
Description
A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Revit 2025 | 2025 → < 2025.1 | 2025.1 |
| Revit 2024 | 2024 → < 2024.2.2 | 2024.2.2 |
| Revit 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| Revit 2022 | 2022 → < 2022.1.7 | 2022.1.7 |
| Revit LT 2025 | 2025 → < 2025.1 | 2025.1 |
| Revit LT 2024 | 2024 → < 2024.2.2 | 2024.2.2 |
| Revit LT 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| Revit LT 2022 | 2022 → < 2022.1.7 | 2022.1.7 |
| revit_lt 2025 | 2025 → < 2025.1 | 2025.1 |
Other CVEs of Revit
The 26 CVEs of Revit →
CVE-2026-14255
A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion…
5.5
Medium
CVE-2026-7406
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference…
7.8
High
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…
5.5
Medium
CVE-2026-11803
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability
7.8
High