CVE-2026-14479

{
  "id": "CVE-2026-14479",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-12T15:17:31.830",
  "lastModified": "2026-10-23T20:10:00.160",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\\SYSTEM service to terminate unexpectedly, resulting in a denial-of-service condition."
    },
    {
      "lang": "es",
      "value": "Una entrada diseñada maliciosamente, cuyo es procesada por el analizador de tramas IPC del Instalador de Autodesk, puede desencadenar una validación incorrecta de una posición u offset especificados por la entrada, resultyo en una operación de subcadena fuera de rango. Un actor malicioso puede aprovechar esta vulnerabilidad para provocar que el servicio NT AUTHORITY\\SYSTEM termine inesperadamente, resultyo en una condición de denegación de servicio."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Autodesk",
          "product": "Installer",
          "defaultStatus": "unaffected",
          "cpes": [
            "cpe:2.3:a:autodesk:installer:2.22.0:*:*:*:*:*:*:*"
          ],
          "versions": [
            {
              "version": "2.22.0",
              "lessThan": "2.23.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-12T15:39:39.871132Z",
          "id": "CVE-2026-14479",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1285"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:autodesk:installer:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2.23",
              "matchCriteriaId": "4F1F3B50-4DCC-4DE7-9325-D0C8A0D97443"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://emsfs.autodesk.com/utility/odis/1/installer/latest/AdODIS-installer.exe",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0013",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}