5.5Mittel
CVE-2026-1288RFA File Parsing Vulnerability in Autodesk Revit
Beschreibung
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.
Schwachstellentyp (CWE):
CWE-476
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0007 vendor-advisoryVendor Advisory
- https://www.autodesk.com/products/autodesk-access/overview patchProduct
CPE-Treffer (NVD) (4)
cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*≥ 2024 < 2024.3.5cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*≥ 2025 < 2025.4.5cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*≥ 2026 < 2026.4.1cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*≥ 2027 < 2027.1