CVE-2025-8354

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Type Confusion vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.autodesk.com/products/autodesk-access/overview	Product
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0021

Configurations

Configuration 1 (hide)

cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Un archivo RFA creado maliciosamente, cuando es analizado por Autodesk Revit, puede forzar una vulnerabilidad de confusión de tipos. Un actor malicioso puede aprovechar esta vulnerabilidad para causar un fallo, causar corrupción de datos o ejecutar código arbitrario en el contexto del proceso actual.

Information

Published : 2025-09-23 14:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-8354

Mitre link : CVE-2025-8354

CVE.ORG link : CVE-2025-8354

JSON object : View

Products Affected

autodesk

revit

CWE

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

{"id": "CVE-2025-8354", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-8354", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-09-24T03:55:16.087083Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@autodesk.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@autodesk.com", "affectedData": [{"cpes": ["cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Revit", "versions": [{"status": "affected", "version": "2026", "lessThan": "2026.3", "versionType": "custom"}, {"status": "affected", "version": "2025", "lessThan": "2025.4.4", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.3.4", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit_lt:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit_lt:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Revit LT", "versions": [{"status": "affected", "version": "2026", "lessThan": "2026.3", "versionType": "custom"}, {"status": "affected", "version": "2025", "lessThan": "2025.4.4", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.3.4", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-09-23T14:15:41.597", "references": [{"url": "https://www.autodesk.com/products/autodesk-access/overview", "tags": ["Product"], "source": "psirt@autodesk.com"}, {"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0021", "source": "psirt@autodesk.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@autodesk.com", "description": [{"lang": "en", "value": "CWE-843"}]}], "descriptions": [{"lang": "en", "value": "A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Type Confusion vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Un archivo RFA creado maliciosamente, cuando es analizado por Autodesk Revit, puede forzar una vulnerabilidad de confusi\u00f3n de tipos. Un actor malicioso puede aprovechar esta vulnerabilidad para causar un fallo, causar corrupci\u00f3n de datos o ejecutar c\u00f3digo arbitrario en el contexto del proceso actual."}], "lastModified": "2026-10-18T21:10:00.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1EA8A6E-9199-42C0-A807-952406DA952C", "versionEndExcluding": "2026.3", "versionStartIncluding": "2026"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@autodesk.com"}