Description
A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service. Exploitation requires a user to open a specially crafted IFC file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Autodesk | Shared Components | 1.11.0 – < 1.12.0, 2.0.0 – < 2.2.0 | 1.12.0 |
| Autodesk | Revit | 2027.0.0 – < 2027.3.0, 2026.0.0 – < 2026.5.1, 2025.0.0 – < 2025.5.0 | 2027.3.0 |
Advisories 1
- WID-SEC-2026-3161 Autodesk Produkte: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 2, 2026