Approved changes feed: RSS · Atom

cpe:2.3:a:autodesk:revit:2022:*:*:*:*:*:*:*

part: a version: 2022 update: *

VendorAutodesk (63e0b459-a294-5304-99c8-fcb7d9c8113e)
ProductRevit (16e922ad-c794-52c1-9341-8ec8318d5489)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7994 vulnerable 2026-06-08 06:58:24.080168 Stack-Based Buffer Overflow Vulnerability in Autodesk Revit
HIGH (7.8)
A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Published: 2024-10-16T21:47:51.258Z
Updated: 2025-01-28T20:10:30.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37008 vulnerable 2026-06-08 06:39:46.169298 Stack-based Overflow Vulnerability in Revit Software
HIGH (7.8)
A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Published: 2024-08-21T10:02:21.128Z
Updated: 2025-08-26T18:07:00.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25002 vulnerable 2026-06-08 05:56:08.322466 Details available
A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
Published: 2023-06-27T00:00:00.000Z
Updated: 2024-12-05T14:39:41.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27871 vulnerable 2026-06-08 05:42:43.498496 Details available
Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.
Published: 2022-06-21T14:23:33.000Z
Updated: 2024-08-03T05:41:10.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40166 vulnerable 2026-06-08 05:35:17.256194 Details available
A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.
Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-04T02:27:31.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40165 vulnerable 2026-06-08 05:35:17.253322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40164 vulnerable 2026-06-08 05:35:17.250567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40163 vulnerable 2026-06-08 05:35:17.244586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40162 vulnerable 2026-06-08 05:35:17.239912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.