Skip to content
fr Sign in
5.5 Medium

CVE-2026-14255 A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion…

Description

A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service. Exploitation requires a user to open a specially crafted IFC file.

Affected products and versions

Product Affected versions Fixed in
Shared Components 2.0 2.0.0 → < 2.2.0 2.2.0
Shared Components 1.11 1.11.0 → < 1.12.0 1.12.0
Revit 2027.0 2027.0.0 → < 2027.3.0 2027.3.0
Revit 2026.0 2026.0.0 → < 2026.5.1 2026.5.1
Revit 2025.0 2025.0.0 → < 2025.5.0 2025.5.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Shared Components

The 33 CVEs of Shared Components →
CVE-2026-0875 A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write… 7.8 High CVE-2026-0874 A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write… 7.8 High CVE-2025-10900 AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write… 7.8 High CVE-2025-10899 AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write… 7.8 High
Track this CVE