CVE-2026-8325
Full vulnerability record from the local CVENow database.
Description
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2026-08-06 22:18:33.243000
Last modified
2026-10-24 13:10:00.147000
View original CVE JSON
{
"id": "CVE-2026-8325",
"sourceIdentifier": "[email protected]",
"published": "2026-08-06T22:18:33.243",
"lastModified": "2026-10-24T13:10:00.147",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."
},
{
"lang": "es",
"value": "Un archivo PDF creado maliciosamente, al ser analizado por Autodesk Revit, puede forzar una vulnerabilidad de escritura fuera de límites. Un actor malicioso puede aprovechar esta vulnerabilidad para provocar un bloqueo, causar corrupción de datos o ejecutar código arbitrario en el contexto del proceso actual."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Autodesk",
"product": "Revit",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.2.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.5.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2025.0.0",
"lessThan": "2025.4.6",
"versionType": "semver",
"status": "affected"
},
{
"version": "2024.0.0",
"lessThan": "2024.3.6",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Autodesk",
"product": "AutoCAD",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.1.2",
"versionType": "semver",
"status": "affected"
},
{
"version": "2025.0.0",
"lessThan": "2025.1.4",
"versionType": "semver",
"status": "affected"
},
{
"version": "2024.0.0",
"lessThan": "2024.1.9",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Autodesk",
"product": "AutoCAD LT",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.1.2",
"versionType": "semver",
"status": "affected"
},
{
"version": "2025.0.0",
"lessThan": "2025.1.4",
"versionType": "semver",
"status": "affected"
},
{
"version": "2024.0.0",
"lessThan": "2024.1.9",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Autodesk",
"product": "DWG TrueView",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:dwg_trueview:2026:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:dwg_trueview:2025:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:dwg_trueview:2024:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.1.2",
"versionType": "semver",
"status": "affected"
},
{
"version": "2025.0.0",
"lessThan": "2025.1.4",
"versionType": "semver",
"status": "affected"
},
{
"version": "2024.0.0",
"lessThan": "2024.1.9",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-07T00:00:00+00:00",
"id": "CVE-2026-8325",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2024",
"versionEndExcluding": "2024.3.6",
"matchCriteriaId": "4ADB4CB5-ABEE-4207-9CE0-AA3FFA82B502"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2025",
"versionEndExcluding": "2025.4.6",
"matchCriteriaId": "6A7544FC-BE0C-4A36-A5D9-1E96398038A7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2026",
"versionEndExcluding": "2026.5",
"matchCriteriaId": "4D3A12A9-E8C2-4D85-B7C7-9392F2DFCA83"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.2",
"matchCriteriaId": "9136E308-DC53-429E-B4C3-0BA4F16ED9D1"
}
]
}
]
}
],
"references": [
{
"url": "https://www.autodesk.com/products/autodesk-access/overview",
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}