CVE-2026-7405
Full vulnerability record from the local CVENow database.
Description
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-08-06 22:18:32.707000
Last modified
2026-10-24 15:10:00.190000
View original CVE JSON
{
"id": "CVE-2026-7405",
"sourceIdentifier": "[email protected]",
"published": "2026-08-06T22:18:32.707",
"lastModified": "2026-10-24T15:10:00.190",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service"
},
{
"lang": "es",
"value": "Un archivo TIF creado maliciosamente, cuando es procesado por ciertos productos de Autodesk durante la importación de imágenes, puede causar una lectura fuera de límites en la biblioteca de manejo de imágenes. Un actor malicioso puede aprovechar esta vulnerabilidad para causar una denegación de servicio."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Autodesk",
"product": "Revit",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.5.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2025.0.0",
"lessThan": "2025.5.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2024.0.0",
"lessThan": "2024.3.5",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Autodesk",
"product": "AutoCAD",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.1.2",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Autodesk",
"product": "AutoCAD LT",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.1.2",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Autodesk",
"product": "DWG TrueView",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:dwg_trueview:2026:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.1.2",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-07T17:22:24.248444Z",
"id": "CVE-2026-7405",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "2A64C402-3A58-4E4D-B2F4-0D6740556857"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "B989AB28-B0B3-48EC-9AB7-C843B2D2C22D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "3F61FBCB-AA8C-4C02-BC1C-4B03248550A0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "C2B92B8C-E946-4396-B88E-C2234CEF724E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "6BE11239-64C9-4CFD-843C-9379ABD44B5D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "D67D455D-167C-47A3-B52B-CD6603312547"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "17978643-83AB-4176-9522-BD1416CE93CF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "C0FA36A5-0C2B-4C73-9D5A-8B8B8163E43C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "A4F54366-2733-4DBA-A481-2E868D18E4EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "4FB306B4-64F2-4E59-A068-D0514D9853BF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "CC01517D-2853-4901-BDE7-8EEFAB9E570F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2025",
"versionEndExcluding": "2025.3.5",
"matchCriteriaId": "8DF83739-35DB-4D58-94C7-282B101E7DB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2026",
"versionEndExcluding": "2026.5",
"matchCriteriaId": "4D3A12A9-E8C2-4D85-B7C7-9392F2DFCA83"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "D869F549-A639-48CB-8F4D-DCF3B92D1291"
}
]
}
]
}
],
"references": [
{
"url": "https://www.autodesk.com/products/autodesk-access/overview",
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0012",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}