What is the CVSS score of CVE-2025-5037?

CVE-2025-5037 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Revit are affected by CVE-2025-5037?

CVE-2025-5037 is a high-severity memory corruption flaw in Autodesk Revit that allows attackers to execute arbitrary code when users open malicious design files (RFA, RTE, or RVT formats).. A patch is available.

How to fix or mitigate CVE-2025-5037?

Within 24 hours: Identify all Revit installations across design and engineering departments and document current versions. Within 7 days: Apply the vendor-released patch from Autodesk to all Revit instances-consult Autodesk security advisory for exact patched version numbers by Revit release line (2024, 2025, etc.). Within 30 days: Conduct user awareness training on not opening Revit files from untrusted sources, implement file-origin logging, and validate patch deployment across the organization.

Revit CVE-2025-5037

EUVD-2025-20992 HIGH

Classic Buffer Overflow (CWE-120)

2025-07-10 psirt@autodesk.com

RCE Buffer Overflow Revit

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:28 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

2026.2,2023.1.8,2024.3.3

EUVD ID Assigned

Mar 16, 2026 - 06:52 euvd

EUVD-2025-20992

Analysis Generated

Mar 16, 2026 - 06:52 vuln.today

CVE Published

Jul 10, 2025 - 12:15 nvd

HIGH 7.8

DescriptionCVE.org

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

AnalysisAI

CVE-2025-5037 is a memory corruption vulnerability in Autodesk Revit triggered by parsing maliciously crafted RFA, RTE, or RVT files, allowing unauthenticated local attackers with user interaction to execute arbitrary code with the privileges of the Revit process. With a CVSS score of 7.8 and requiring only local access and user interaction (opening a file), this vulnerability poses significant risk to design and engineering teams who routinely handle external Revit model files.

Technical ContextAI

The vulnerability exists in Autodesk Revit's file parsing engine, specifically in the handling of RFA (Revit Family), RTE (Revit Template), and RVT (Revit Project) binary file formats. The root cause is classified as CWE-120 (Buffer Copy without Checking Size of Input), a classic buffer overflow or similar memory safety issue in the file deserialization logic. When Revit processes a specially crafted file with malformed headers, metadata, or embedded geometry data, the parser fails to properly validate input boundaries before copying data into fixed-size buffers. This memory corruption occurs during the initial file parsing phase before the model is fully loaded, affecting the BIM (Building Information Modeling) document format processing within the application's core libraries.

RemediationAI

Immediate: Update Autodesk Revit to the patched version released by Autodesk (specific version numbers should be obtained from Autodesk's official security advisory). 2. Workarounds: Do not open RFA, RTE, or RVT files from untrusted sources until patched; validate file integrity and source before opening. 3. Network Controls: Implement email gateway scanning for Revit file attachments; restrict file sharing through unencrypted channels. 4. Monitoring: Deploy file execution monitoring to detect suspicious Revit process behavior after file opening. Check Autodesk's official security bulletins and the Revit product documentation portal for patch availability and detailed patch numbers.