CVE-2025-5037: falha de alta gravidade em Autodesk Revit
RFA File Parsing Memory Corruption Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.4%
A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Autodesk · RevitCVEs relacionadas — Autodesk Revit
No mesmo produto, das mais perigosas para as menos.
CVE-2025-1275HIGHJPG File Parsing Heap-Based Overflow VulnerabilityEPSS 0.4%CVE-2025-2497HIGHDWG File Parsing Stack-Based Buffer VulnerabilityEPSS 0.3%CVE-2025-1277HIGHPDF File Parsing Memory Corruption VulnerabilityEPSS 0.3%CVE-2025-1656HIGHPDF File Parsing Heap-based Overflow VulnerabilityEPSS 0.3%CVE-2024-37008HIGHStack-based Overflow Vulnerability in Revit SoftwareEPSS 0.2%CVE-2025-1274HIGHRCS File Parsing Out-of-Bounds Write VulnerabilityEPSS 0.2%