Skip to content
OpenAdvisories
High · 7.8 CVE-2024-11608 EUVD-2024-34399GHSA-c2gq-fxg8-22f9

A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow. A malicious actor …

Published Dec 9, 2024 · Updated Aug 28, 2025 · Assigned by autodesk

Description

A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected products

VendorProductAffectedFixed
Autodesk Revit 2025 – < 2025.4, 2024 – < 2024.3.2, 2023 – < 2023.1.7 2025.4

References