CVE-2024-11608

Autodesk / Revit PUBLISHED

Description (CNA)

A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Autodesk / Revit	affected 2025 before 2025.4; affected 2024 before 2024.3.2; affected 2023 before 2023.1.7

CWE

CWE-122

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.