Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-1288 EUVD-2026-37744GHSA-5w9w-6m87-g4pf

RFA File Parsing Vulnerability in Autodesk Revit

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by autodesk

Description

A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.

Affected products

VendorProductAffectedFixed
Autodesk Revit 2027.0.0 – < 2027.1.0, 2026.0.0 – < 2026.4.1, 2025.0.0 – < 2025.4.5, 2024.0.0 – < 2024.3.5 2027.1.0

References