CVE-2026-1289: Autodesk Revit, грешка в паметта

Описание

Оригинално описание

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process.

Засегнати продукти

• Autodesk Revit: 2027.0.0 преди 2027.2.0; 2026.0.0 преди 2026.5.0; 2025.0.0 преди 2025.4.6; 2024.0.0 преди 2024.3.6
• Autodesk AutoCAD: 2027.0.0 преди 2027.1.0; 2026.0.0 преди 2026.1.2; 2025.0.0 преди 2025.1.4; 2024.0.0 преди 2024.1.9
• Autodesk AutoCAD LT: 2027.0.0 преди 2027.1.0; 2026.0.0 преди 2026.1.2; 2025.0.0 преди 2025.1.4; 2024.0.0 преди 2024.1.9
• Autodesk DWG TrueView: 2027.0.0 преди 2027.1.0; 2026.0.0 преди 2026.1.2; 2025.0.0 преди 2025.1.4; 2024.0.0 преди 2024.1.9

Вид слабост

• CWE-416 Използване на памет след освобождаване (Use-After-Free)

История

Други уязвимости в Autodesk Revit

• 5.5CVE-2026-14255
• 7.8CVE-2026-7406
• 5.5CVE-2026-7405
• 7.8CVE-2026-11803
• 7.8CVE-2026-8325

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-1289
• https://nvd.nist.gov/vuln/detail/CVE-2026-1289
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011
• https://www.autodesk.com/products/autodesk-access/overview