Skip to content
fr Sign in
7.8 High

CVE-2024-7994 A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow

Description

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected products and versions

Product Affected versions Fixed in
Revit 2025 2025 → < 2025.3 2025.3
Revit 2024 2024 → < 2024.3 2024.3
Revit 2023 2023 → < 2023.1.6 2023.1.6
Revit 2022 2022 → < 2022.1.8 2022.1.8

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Revit

The 26 CVEs of Revit →
CVE-2026-14255 A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion… 5.5 Medium CVE-2026-7406 A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference… 7.8 High CVE-2026-7405 A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an… 5.5 Medium CVE-2026-11803 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability 7.8 High
Track this CVE