5.5Media
CVE-2026-1288RFA File Parsing Vulnerability in Autodesk Revit
Descripción
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.
Debilidad (CWE):
CWE-476
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0007 vendor-advisoryVendor Advisory
- https://www.autodesk.com/products/autodesk-access/overview patchProduct
Coincidencias CPE (NVD) (4)
cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*≥ 2024 < 2024.3.5cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*≥ 2025 < 2025.4.5cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*≥ 2026 < 2026.4.1cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*≥ 2027 < 2027.1