High severity7.8NVD Advisory· Published Aug 21, 2024· Updated Jun 17, 2026
CVE-2024-37008
CVE-2024-37008
Description
A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected products
6cpe:2.3:a:autodesk:revit:2022:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:autodesk:revit:2022:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:revit:2023:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:revit_lt:2025:*:*:*:*:*:*:*range: 2025
- (no CPE)
Patches
Vulnerability mechanics
References
1- www.autodesk.com/trust/security-advisories/adsk-sa-2024-0013nvdVendor Advisory
News mentions
0No linked articles in our index yet.