CVE-2024-11268 — PDF File Parsing Vulnerability in Autodesk Revit

CVE-2024-11268

PDF File Parsing Vulnerability in Autodesk Revit PUBLISHED

Description (CNA)

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak.

Affected (CNA)

Vendor / product	Versions
Autodesk / Revit	affected 2025 before 2025.4; affected 2024 before 2024.3.1

CWE

CWE-125

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0024

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.