PT-2024-27240 · Autodesk · Autodesk Revit
CVE-2024-37008
·
Published
2024-08-21
·
Updated
2024-08-25
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Autodesk Revit versions prior to 2025
Description
A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. This allows a malicious actor to execute arbitrary code in the context of the current process.
Recommendations
For Autodesk Revit versions prior to 2025, patch immediately to resolve the issue. As a temporary workaround, consider restricting the handling of DWG files until a patch is applied. Monitor for exploit development and apply additional security measures as necessary.
Fix
Memory Corruption
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Autodesk Revit