Skip to content
fr Sign in
7.8 High

CVE-2026-1289 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability

Description

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process.

Affected products and versions

Product Affected versions Fixed in
Revit 2027.0 2027.0.0 → < 2027.2.0 2027.2.0
Revit 2026.0 2026.0.0 → < 2026.5.0 2026.5.0
Revit 2025.0 2025.0.0 → < 2025.4.6 2025.4.6
Revit 2024.0 2024.0.0 → < 2024.3.6 2024.3.6
AutoCAD 2027.0 2027.0.0 → < 2027.1.0 2027.1.0
AutoCAD 2026.0 2026.0.0 → < 2026.1.2 2026.1.2
AutoCAD 2025.0 2025.0.0 → < 2025.1.4 2025.1.4
AutoCAD 2024.0 2024.0.0 → < 2024.1.9 2024.1.9
AutoCAD LT 2027.0 2027.0.0 → < 2027.1.0 2027.1.0
Show the 7 other branches
Product Affected versions Fixed in
AutoCAD LT 2026.0 2026.0.0 → < 2026.1.2 2026.1.2
AutoCAD LT 2025.0 2025.0.0 → < 2025.1.4 2025.1.4
AutoCAD LT 2024.0 2024.0.0 → < 2024.1.9 2024.1.9
DWG TrueView 2027.0 2027.0.0 → < 2027.1.0 2027.1.0
DWG TrueView 2026.0 2026.0.0 → < 2026.1.2 2026.1.2
DWG TrueView 2025.0 2025.0.0 → < 2025.1.4 2025.1.4
DWG TrueView 2024.0 2024.0.0 → < 2024.1.9 2024.1.9

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Revit

The 26 CVEs of Revit →
CVE-2026-14255 A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion… 5.5 Medium CVE-2026-7406 A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference… 7.8 High CVE-2026-7405 A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an… 5.5 Medium CVE-2026-11803 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability 7.8 High
Track this CVE