# CVE-2026-1288: Autodesk Revit NULL Pointer Dereference in Convert RFA to FormIt

Source: https://junglewise.ai/threats/cve-2026-1288-autodesk-revit-null-pointer-dereference-in-convert-rfa-to-formit  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-17. Updated: 2026-06-20  
License: CC BY 4.0 with a link back

CVE-2026-1288 · Severity: medium · CVSS 5.5 · Published 2026-06-17

Autodesk Revit is a professional design software used by architects and engineers to create building models. A vulnerability exists where opening a specially crafted RFA file and using the "Convert RFA to FormIt" feature can cause the application to crash. This results in a denial-of-service, potentially causing users to lose unsaved work or disrupting project workflows.

Technologies: [Autodesk Revit](https://junglewise.ai/threats/technologies/revit). Vendors: [Autodesk](https://junglewise.ai/threats/vendors/autodesk).

## Quick answers

**Is CVE-2026-1288 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-1288 being exploited in the wild.

**How severe is CVE-2026-1288?** Medium severity, with a CVSS score of 5.5, published 17 June 2026.

**Which products and versions are affected?** Autodesk Revit 2027.0.0 before 2027.1.0, 2026.0.0 before 2026.4.1, 2025.0.0 before 2025.4.5, 2024.0.0 before 2024.3.5.

**Is there a fix for CVE-2026-1288?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-1288 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-1288?** Check whether you run Autodesk Revit at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A NULL Pointer Dereference (CWE-476) exists within Autodesk Revit when processing RFA files through the “Convert RFA to FormIt” conversion utility. The vulnerability is triggered when the application attempts to read or process a specifically malformed RFA file, leading to an invalid memory access and subsequent process termination. This is a local attack requiring user interaction, as a user must be persuaded to open and convert the malicious file. Successful exploitation results in a denial-of-service (DoS) condition of the Revit application. Patches have been released for versions 2024 through 2027.

## Affected products

- Autodesk Revit 2027.0.0 before 2027.1.0, 2026.0.0 before 2026.4.1, 2025.0.0 before 2025.4.5, 2024.0.0 before 2024.3.5

## Timeline

- 2026-06-17: disclosed
- 2026-06-17: advisory

## References

- [https://www.autodesk.com/products/autodesk-access/overview](https://www.autodesk.com/products/autodesk-access/overview)
- [https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0007](https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0007)

## Related threats

- [A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A…](https://junglewise.ai/threats/cve-2026-8325-a-maliciously-crafted-pdf-file-when-parsed-through-autodesk-revit)
- [A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer…](https://junglewise.ai/threats/cve-2026-7406-a-maliciously-crafted-bmp-file-when-parsed-through-certain)
- [A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…](https://junglewise.ai/threats/cve-2026-7405-a-maliciously-crafted-tif-file-when-parsed-through-certain)
- [A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A…](https://junglewise.ai/threats/cve-2026-1289-a-maliciously-crafted-pdf-file-when-parsed-through-autodesk-revit)
- [A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A…](https://junglewise.ai/threats/cve-2026-11803-a-maliciously-crafted-pdf-file-when-parsed-through-autodesk-revit)