Autodesk Revit Vulnerability Could Lead to Memory Leak or Crash

CVE-2024-11268

Summary

A vulnerability exists in Autodesk Revit that can be exploited through carefully crafted PDF files. When a user interacts with a malicious PDF, it facilitates an Out-of-Bounds Read condition during the parsing process. This flaw enables attackers to potentially crash the Revit application or exploit the situation to leak arbitrary memory information. Proper precautions should be taken when handling PDF files in Revit to mitigate the risk associated with this vulnerability.

References