CVE-2024-7994 — Stack-Based Buffer Overflow Vulnerability in Autodesk Revit

CVE-2024-7994

Stack-Based Buffer Overflow Vulnerability in Autodesk Revit PUBLISHED

Description (CNA)

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Autodesk / Revit	affected 2025 before 2025.3; affected 2024 before 2024.3; affected 2023 before 2023.1.6; affected 2022 before 2022.1.8

CWE

CWE-121

References

https://autodesk.com/trust/security-advisories/adsk-sa-2024-0017

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.