CVE-2024-11454

Published: Dec 9, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.

Affected (1)

Products: Autodesk: Revit

Autodesk

1 product

Revit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Autodesk Revit	From 2025 to 2025.4

Related CWEs

CWE-426

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (1)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0025

Source: psirt@autodesk.com

Vendor Advisory

Timeline

No history available yet.