CVE-2025-5042

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@autodesk.com

Published

2025-07-22

Last modified

2026-02-26

Weaknesses

CWE-125

Affected products

• Revit (Autodesk)
• Revit Lt (Autodesk)

References

• https://www.autodesk.com/products/autodesk-access/overview
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0013