CVE-2024-37008 — Stack-based Overflow Vulnerability in Revit Software

CVE-2024-37008

Stack-based Overflow Vulnerability in Revit Software PUBLISHED

Description (CNA)

A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Autodesk / Revit	affected 2025 before 2025.1; affected 2024 before 2024.2.2; affected 2023 before 2023.1.5; affected 2022 before 2022.1.7
Autodesk / Revit LT	affected 2025 before 2025.1; affected 2024 before 2024.2.2; affected 2023 before 2023.1.5; affected 2022 before 2022.1.7

CWE

CWE-121

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0013

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.