CVE-2024-37008

Stack-based Overflow Vulnerability in Revit Software

State: Published
Severity: 7.8 High
Published: Aug 21, 2024
Updated: Aug 26, 2025
Reserved: May 30, 2024

Description

A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	autodesk

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
RevitAutodesk	2025 to before 2025.1Affected 2024 to before 2024.2.2Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.7Affected
Revit LTAutodesk	2025 to before 2025.1Affected 2024 to before 2024.2.2Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.7Affected

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0013

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.