Autodesk Revit Vulnerability Allows Stack-Based Buffer Overflow

CVE-2024-7994

What is CVE-2024-7994?

A vulnerability exists in Autodesk Revit which can be exploited by processing a specially crafted RFA file. This vulnerability enables a stack-based buffer overflow, allowing malicious actors to crash the application or read sensitive information. Additionally, it can facilitate the execution of arbitrary code within the current process context, posing significant security risks to users. Affected versions include Autodesk Revit 2021 through 2024.

References