Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2026-1288

RFA File Parsing Vulnerability in Autodesk Revit

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
autodesk

Description

A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Autodesk Revit

Default version status: unaffected

  • 2027.0.0 to < 2027.1.0affected
  • 2026.0.0 to < 2026.4.1affected
  • 2025.0.0 to < 2025.4.5affected
  • 2024.0.0 to < 2024.3.5affected

References