CVE-2026-7406
Full vulnerability record from the local CVENow database.
Description
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-08-06 22:18:32.837000
Last modified
2026-10-24 15:10:00.190000
View original CVE JSON
{
"id": "CVE-2026-7406",
"sourceIdentifier": "[email protected]",
"published": "2026-08-06T22:18:32.837",
"lastModified": "2026-10-24T15:10:00.190",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process."
},
{
"lang": "es",
"value": "Un archivo BMP manipulado maliciosamente, al ser procesado por ciertos productos de Autodesk, puede provocar una vulnerabilidad de Desreferencia de Puntero No Confiable. Un actor malicioso puede explotar esta vulnerabilidad para ejecutar código arbitrario en el contexto del proceso actual."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Autodesk",
"product": "Revit",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.5.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2025.0.0",
"lessThan": "2025.5.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2024.0.0",
"lessThan": "2024.3.5",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Autodesk",
"product": "AutoCAD",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.1.2",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Autodesk",
"product": "AutoCAD LT",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.1.2",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Autodesk",
"product": "DWG TrueView",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:dwg_trueview:2026:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2027.0.0",
"lessThan": "2027.1.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "2026.0.0",
"lessThan": "2026.1.2",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-07T15:32:33.647250Z",
"id": "CVE-2026-7406",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-822"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "2A64C402-3A58-4E4D-B2F4-0D6740556857"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "B989AB28-B0B3-48EC-9AB7-C843B2D2C22D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "3F61FBCB-AA8C-4C02-BC1C-4B03248550A0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "C2B92B8C-E946-4396-B88E-C2234CEF724E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "6BE11239-64C9-4CFD-843C-9379ABD44B5D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "D67D455D-167C-47A3-B52B-CD6603312547"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "17978643-83AB-4176-9522-BD1416CE93CF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "C0FA36A5-0C2B-4C73-9D5A-8B8B8163E43C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "A4F54366-2733-4DBA-A481-2E868D18E4EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "4FB306B4-64F2-4E59-A068-D0514D9853BF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "CC01517D-2853-4901-BDE7-8EEFAB9E570F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2025",
"versionEndExcluding": "2025.3.5",
"matchCriteriaId": "8DF83739-35DB-4D58-94C7-282B101E7DB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2026",
"versionEndExcluding": "2026.5",
"matchCriteriaId": "4D3A12A9-E8C2-4D85-B7C7-9392F2DFCA83"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2027",
"versionEndExcluding": "2027.1",
"matchCriteriaId": "D869F549-A639-48CB-8F4D-DCF3B92D1291"
}
]
}
]
}
],
"references": [
{
"url": "https://www.autodesk.com/products/autodesk-access/overview",
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0012",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}