Autodesk Products Heap-Based Overflow Vulnerability via Malicious PDF Parsing

A heap-based overflow vulnerability has been identified in certain Autodesk products, including Autodesk Revit, AutoCAD and its specialized toolsets, Advance Steel, and Civil 3D. This vulnerability arises when a maliciously crafted PDF file is parsed by the affected software, potentially leading to a crash, unauthorized reading of sensitive data, or execution of arbitrary code within the current process context.

Impact

Exploitation of this vulnerability can cause application crashes, unauthorized access to sensitive data, or allow for the execution of arbitrary code in the context of the user process.

Remediation

Users can update to the latest versions that mitigate this vulnerability through Autodesk Access or the Accounts Portal. Specific update versions vary by product.