CVE-2026-7405
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-08-06
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Auth
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
Required
S:
Unchanged
C:
None
I:
None
A:
High
Description
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service
Weakness Classification (1)
Affected Software (14)
| Vendor | Product | Version |
|---|---|---|
| autodesk | advance_steel | 2027 – 2027.1 |
| autodesk | autocad | 2027 – 2027.1 |
| autodesk | autocad_architecture | 2027 – 2027.1 |
| autodesk | autocad_electrical | 2027 – 2027.1 |
| autodesk | autocad_lt | 2027 – 2027.1 |
| autodesk | autocad_map_3d | 2027 – 2027.1 |
| autodesk | autocad_mechanical | 2027 – 2027.1 |
| autodesk | autocad_mep | 2027 – 2027.1 |
| autodesk | autocad_plant_3d | 2027 – 2027.1 |
| autodesk | civil_3d | 2027 – 2027.1 |
| autodesk | dwg_trueview | 2027 – 2027.1 |
| autodesk | revit | 2025 – 2025.3.5 |
| autodesk | revit | 2026 – 2026.5 |
| autodesk | revit | 2027 – 2027.1 |
References & Advisories (2)
Vendor Advisory
Product