CVE-2024-11454 — Untrusted Search Path vulnerability in Autodesk Revit

CVE-2024-11454

Untrusted Search Path vulnerability in Autodesk Revit PUBLISHED

Description (CNA)

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.

Affected (CNA)

Vendor / product	Versions
Autodesk / Revit	affected 2025 before 2025.4

CWE

CWE-426

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0025

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.