CVE-2024-37008: Stack-based Overflow Vulnerability in Revit Software
Published Aug 21, 2024
·Updated
A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected Software
4 affected components
Autodesk Revit=2022
Autodesk Revit=2023
Autodesk Revit=2024
Autodesk Revit=2025
Event History
Aug 21, 2024
CVE Published
via MITRE·10:02 AM
Data Sourced
via MITRE·10:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-37008?
CVE-2024-37008 is rated as critical due to its potential for remote code execution.
2
How do I fix CVE-2024-37008?
To fix CVE-2024-37008, users should apply the latest security updates provided by Autodesk for their Revit software.
3
Which versions of Revit are affected by CVE-2024-37008?
CVE-2024-37008 affects Autodesk Revit versions 2022, 2023, 2024, and 2025.
4
What is the impact of exploiting CVE-2024-37008?
Exploiting CVE-2024-37008 allows attackers to execute arbitrary code within the context of the Revit process.
5
Can CVE-2024-37008 be exploited by opening a malicious DWG file?
Yes, CVE-2024-37008 can be exploited by opening a maliciously crafted DWG file in Revit.