Autodesk Products Out-of-Bounds Write Vulnerability in PDF File Parsing

A vulnerability allowing out-of-bounds write has been identified in certain Autodesk desktop products, including Autodesk Revit, AutoCAD and its specialized toolsets, Advance Steel, and Civil 3D. This vulnerability arises when a maliciously crafted PDF file is parsed, potentially leading to a crash, data corruption, or arbitrary code execution within the current process.

Impact

Exploitation of this vulnerability can cause a crash, data corruption, or arbitrary code execution in the context of the current process.

Remediation

Users can update to the latest versions that mitigate this vulnerability via Autodesk Access or the Accounts Portal. Specific update versions vary by product.