Out-of-Bounds Read in Autodesk Products During Image Import
CVE-2026-7405

5.5MEDIUM

Key Information:

Vendor

Autodesk
Status
Revit
Autocad
Autocad Lt
Dwg Trueview
Vendor
CVE Published:
6 August 2026

What is CVE-2026-7405?

A vulnerability exists in certain Autodesk products whereby a specially crafted TIF file can trigger an Out-of-Bounds Read when processed during image import. This flaw allows malicious actors to manipulate the image handling library, potentially leading to a denial of service condition. Users are advised to apply the latest patches provided by Autodesk to mitigate this risk.

Affected Version(s)

AutoCAD 2027.0.0 < 2027.1.0

AutoCAD 2026.0.0 < 2026.1.2

AutoCAD LT 2027.0.0 < 2027.1.0

References

https://www.autodesk.com/trust/security-advisories/adsk-s...
vendor-advisory
https://www.autodesk.com/products/autodesk-access/overview
patch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.