CVE-2024-11608
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 9, 2024
CWE ID 122
Summary
CVE-2024-11608 is a newly identified vulnerability in Autodesk Revit that can be exploited through a maliciously crafted SKP file. This file, when imported into the software, triggers a Heap-based Overflow. An attacker can take advantage of this weakness to cause a crash, gain unauthorized access to sensitive data, or execute malicious code within the current process. The vulnerability poses a significant risk to organizations and individuals relying on Autodesk Revit for their design and architecture projects.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Autodesk Revit
Affected Vendors
- Autodesk