Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

40 records

Vendor: Autodesk Component: Revit Clear all filters
TI-2026-06508 CVE-2026-7405 · GHSA-ww8h-hg5f-w94j

TIF File Parsing Out-of-Bounds Read in certain Autodesk products

Priority LOW 24

A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00162 Published 2026-08-06 Fixed in 2027.1.0, 2026.5.0 +3 CWE-125
TI-2026-01004 CVE-2026-1288 · GHSA-5w9w-6m87-g4pf

RFA File Parsing Vulnerability in Autodesk Revit

Priority LOW 24

A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00116 Published 2026-06-17 Fixed in 2027.1.0, 2026.4.1 +2 CWE-476
TI-2025-07649 CVE-2025-8354 · GHSA-7m6j-9fgf-m6gm

RFA File Parsing Type Confusion Vulnerability

Priority LOW 35

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Type Confusion vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0018 Published 2025-09-23 Fixed in 2026.3, 2025.4.4 +1 CWE-843
TI-2025-08142 CVE-2025-8894 · GHSA-fmr9-57qr-252w

PDF File Parsing Heap-Based Buffer Overflow Vulnerability

Priority LOW 35

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00172 Published 2025-09-16 Fixed in 2026.3, 2025.4.3 +5 CWE-122
TI-2025-08141 CVE-2025-8893 · GHSA-643f-mwpp-p2r3

PDF File Parsing Out-of-Bounds Write Vulnerability

Priority LOW 35

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00172 Published 2025-09-16 Fixed in 2026.3, 2025.4.3 +5 CWE-787
TI-2025-04518 CVE-2025-5039 · GHSA-4c85-w99g-9v4w

Privilege Ecalation due to Untrusted Search Path Vulnerability

Priority LOW 35

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00206 Published 2025-07-24 Fixed in 2026.1, 2026.0.2 +2 CWE-426
TI-2025-04520 CVE-2025-5042 · GHSA-4rg4-jj35-335f

RFA File Parsing Out-of-Bounds Read Vulnerability

Priority LOW 35

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00192 Published 2025-07-22 Fixed in 2026.2, 2025.4.3 +2 CWE-125
TI-2025-04519 CVE-2025-5040 · GHSA-5vfp-v42j-9fcc

RTE File Parsing Heap-Based Overflow Vulnerability

Priority LOW 35

A maliciously crafted RTE file, when parsed through Autodesk Revit, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00199 Published 2025-07-10 Fixed in 2026.2, 2025.4.2 +2 CWE-122
TI-2025-04516 CVE-2025-5037 · GHSA-93v3-9cfr-g64h

RFA File Parsing Memory Corruption Vulnerability

Priority LOW 36

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00379 Published 2025-07-10 Fixed in 2026.2, 2025.4.2 +2 CWE-120
TI-2025-04515 CVE-2025-5036 · GHSA-rhfv-c52c-x747

RFA File Parsing Use-After-Free Vulnerability

Priority LOW 35

A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00205 Published 2025-06-02 Fixed in 2026.1, 2025.4.2 +2 CWE-416
TI-2025-01088 CVE-2025-1274 · GHSA-7wf3-fr96-gq58

RCS File Parsing Out-of-Bounds Write Vulnerability

Priority LOW 35

A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00226 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 +4 CWE-787
TI-2025-01091 CVE-2025-1277 · GHSA-24h7-jwc9-7j8v

PDF File Parsing Memory Corruption Vulnerability

Priority LOW 36

A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00271 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 +4 CWE-120
TI-2025-01422 CVE-2025-1656 · GHSA-j3f2-qmpv-4939

PDF File Parsing Heap-based Overflow Vulnerability

Priority LOW 36

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00271 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 +4 CWE-122
TI-2025-01087 CVE-2025-1273 · GHSA-58f7-f9v5-xpf2

PDF File Parsing Heap-Based Overflow Vulnerability

Priority LOW 35

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00212 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 +4 CWE-122
TI-2025-02171 CVE-2025-2497 · GHSA-2r37-g5q9-qrfc

DWG File Parsing Stack-Based Buffer Vulnerability

Priority LOW 36

A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00328 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 CWE-122
TI-2025-01090 CVE-2025-1276 · GHSA-v6hw-wwhm-q834

DWG File Parsing Out-of-Bounds Write Vulnerability

Priority LOW 36

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00294 Published 2025-04-15 Fixed in 2025.1.2, 2024.1.7 +1 CWE-787
TI-2025-01089 CVE-2025-1275 · GHSA-vvqg-86qw-rhm8

JPG File Parsing Heap-Based Overflow Vulnerability

Priority LOW 36

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00377 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 +3 CWE-122
TI-2024-10755 CVE-2024-11608 · GHSA-c2gq-fxg8-22f9

Heap-based buffer overflow in Autodesk Revit

Priority LOW 35

A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00195 Published 2024-12-09 Fixed in 2025.4, 2024.3.2 +1 CWE-122
TI-2024-10615 CVE-2024-11454 · GHSA-vfjm-xw35-h45p

Untrusted Search Path vulnerability in Autodesk Revit

Priority LOW 35

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00195 Published 2024-12-09 Fixed in 2025.4 CWE-426
TI-2024-10438 CVE-2024-11268 · GHSA-c4vf-pw69-v3w3

PDF File Parsing Vulnerability in Autodesk Revit

Priority LOW 24

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0017 Published 2024-12-09 Fixed in 2025.4, 2024.3.1 CWE-125
TI-2024-07411 CVE-2024-7994 · GHSA-8wwv-8wrf-7qwr

Stack-Based Buffer Overflow Vulnerability in Autodesk Revit

Priority LOW 35

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00214 Published 2024-10-16 Fixed in 2025.3, 2024.3 +2 CWE-121
Load more