medium5.5
CVE-2026-1288
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability.
Impact
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autodesk | Revit | from 2024 before 2024.3.5 from 2025 before 2025.4.5 from 2026 before 2026.4.1 from 2027 before 2027.1 |