Autodesk Products Type Confusion Vulnerability Allowing Memory Corruption and Arbitrary Code Execution

A type confusion vulnerability has been identified in several Autodesk products, including Autodesk Revit, when processing maliciously crafted RFA files. This vulnerability can lead to memory corruption, causing crashes, data corruption, or allowing the execution of arbitrary code within the current process context.

Impact

Exploitation of this vulnerability can result in memory corruption, potentially leading to crashes, data corruption, or arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to the latest version of Autodesk Shared Components via Autodesk Access or the Accounts Portal. These shared component updates can be installed independently of the host products.