EUVD-2026-54291
GHSA-jqfp-pcg6-pj25
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File-parsing attack requires local file open with user interaction; no privileges needed; full C/I/A impact consistent with RCE and data disclosure potential.
Primary rating from Vendor (autodesk).
CVSS VectorVendor: autodesk
Lifecycle Timeline
3DescriptionCVE.org
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
AnalysisAI
Out-of-bounds read in Autodesk Revit's PDF parsing engine exposes users to crashes, sensitive memory disclosure, and arbitrary code execution within the Revit process when opening a maliciously crafted PDF file. Affected are users of Autodesk Revit across versions covered by advisory ADSK-SA-2026-0011, with the attack requiring only that a target be socially engineered into opening a weaponized PDF - a realistic threat vector for AEC-industry professionals who routinely exchange PDF documents. No public exploit code has been identified at time of analysis, and no CISA KEV listing exists, though the high C/I/A impact profile makes this a meaningful risk for targeted attacks against Revit users.
Technical ContextAI
CWE-125 (Out-of-Bounds Read) describes a class of memory safety flaw where software reads data past the end of an allocated buffer. In Autodesk Revit's PDF parsing subsystem, a specially crafted PDF can supply malformed structural data - such as corrupted stream lengths, object offsets, or compressed content sizes - that causes the parser to read beyond intended memory boundaries. This can yield sensitive in-process data (memory disclosure) or, if the over-read value influences subsequent branching or pointer dereferences, escalate to arbitrary code execution. The tags 'Buffer Overflow' and 'RCE' alongside 'Information Disclosure' indicate Autodesk assesses the full spectrum of impact from this class of flaw. Autodesk Revit is a Building Information Modeling (BIM) platform widely used in architecture, engineering, and construction; its ability to import and parse PDF documents as reference underlays is the entry surface for this vulnerability.
RemediationAI
The primary remediation is to apply the patch or updated release identified in Autodesk security advisory ADSK-SA-2026-0011 at https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011. Patch version details are not independently confirmed from the available NVD data - consult the advisory directly for the exact fixed build. As a compensating control pending patch deployment, organizations should train Revit users to avoid opening PDF files received from untrusted or unexpected sources, and where operationally feasible, pre-screen PDF files through isolated sandboxed environments before importing them into Revit. Restricting Revit's ability to open externally received PDFs via application control policies or workflow enforcement is a higher-friction but effective workaround, though it may disrupt legitimate collaboration workflows common in AEC environments. Autodesk Access (https://www.autodesk.com/products/autodesk-access/overview) is the vendor's update delivery platform and should be used to ensure Revit installations receive updates promptly.
A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. Rate
Use-After-Free in Autodesk Revit's PDF parser allows arbitrary code execution, sensitive data disclosure, or application
Untrusted pointer dereference in Autodesk products' BMP file parser enables arbitrary code execution in the context of t
Out-of-bounds write in Autodesk Revit's PDF parser allows arbitrary code execution in the context of the current user pr
A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overf
A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerabilit
A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vuln
A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability.
A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vuln
Use-After-Free vulnerability (CWE-416) in Autodesk Revit triggered by maliciously crafted RFA (Revit Family) files that
A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vuln
CVE-2025-5037 is a memory corruption vulnerability in Autodesk Revit triggered by parsing maliciously crafted RFA, RTE,
Same weakness CWE-125 – Out-of-bounds Read
View allShare
External POC / Exploit Code
Leaving vuln.today