Skip to content
OpenAdvisories
High · 7.8 CVE-2025-5037 EUVD-2025-20992GHSA-93v3-9cfr-g64h

RFA File Parsing Memory Corruption Vulnerability

Published Jul 10, 2025 · Updated Feb 26, 2026 · Assigned by autodesk

Description

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products

VendorProductAffectedFixed
Autodesk Revit 2026 – < 2026.2, 2025 – < 2025.4.2, 2024 – < 2024.3.3, 2023 – < 2023.1.8 2026.2

References