Aller au contenu
en Se connecter
7.8 Élevée

CVE-2024-11608 A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow

Description

A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Produits et versions touchés

Produit Versions touchées Corrigé en
Revit 2025 2025 → < 2025.4 2025.4
Revit 2024 2024 → < 2024.3.2 2024.3.2
Revit 2023 2023 → < 2023.1.7 2023.1.7

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Revit

Les 26 CVE de Revit →
CVE-2026-14255 A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion… 5.5 Moyenne CVE-2026-7406 A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference… 7.8 Élevée CVE-2026-7405 A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an… 5.5 Moyenne CVE-2026-11803 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability 7.8 Élevée
Suivre cette CVE