CVE-2026-8325
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Out-of-Bounds Write vulnerability when parsing a malicious PDF in Autodesk Revit. Can cause crash, data corruption, or arbitrary code execution.
Risk Assessment
An attacker could exploit this to gain control of the process, potentially leading to data theft or malware installation.
Recommendation
Avoid opening untrusted PDF files in Autodesk Revit and update to the latest version.
Other vulnerabilities in Autodesk Revit
See all- CVE-2026-1289High
Use-After-Free vulnerability in Autodesk Revit when parsing a maliciously crafted PDF file. An attacker can leverage this to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process.
- CVE-2026-11803High
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
- CVE-2026-1288Medium
A maliciously crafted RFA file, when converted to FormIt in Autodesk Revit, can trigger a NULL pointer dereference. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.
Original NVD description (English source)
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.