{"id":"CVE-2026-14255","revision":"038dd9d4efea40cdba1205a438dd24d8","records":[{"revision":"038dd9d4efea40cdba1205a438dd24d8","observedAt":"2026-10-27T18:43:43.015+00:00","statement":{"source":"cve-program","id":"CVE-2026-14255","aliases":[],"title":"IFC File Parsing Uncontrolled Recursion in Certain Autodesk Products","description":"A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service. Exploitation requires a user to open a specially crafted IFC file.","state":0,"publishedAt":"2026-09-02T14:29:56.099+00:00","modifiedAt":"2026-10-27T17:46:26.857+00:00","affected":[{"ecosystem":"Vendor product","name":"Shared Components","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Autodesk\",\n                    \"product\": \"Shared Components\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.11.0\",\n                            \"lessThan\": \"1.12.0\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2.0.0\",\n                            \"lessThan\": \"2.2.0\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\",\n                    \"cpes\": [\n                        \"cpe:2.3:a:autodesk:shared_components:1.11.0.3:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:autodesk:shared_components:2.0.4.1:*:*:*:*:*:*:*\"\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Revit","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Autodesk\",\n                    \"product\": \"Revit\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2027.0.0\",\n                            \"lessThan\": \"2027.3.0\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2026.0.0\",\n                            \"lessThan\": \"2026.5.1\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2025.0.0\",\n                            \"lessThan\": \"2025.5.0\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\",\n                    \"cpes\": [\n                        \"cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","score":5.5,"severity":"MEDIUM"}],"references":["https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0015","https://www.autodesk.com/products/autodesk-access/overview"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-14255","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-14255","identifiers":["CVE-2026-14255"]},"retained":false,"historicalAffected":[]}],"coverage":[]}