A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/products/autodesk-access/overview | Product |
| https://www.autodesk.com/products/dwg-trueview/overview | Product |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0009 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
11 Aug 2026, 01:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.autodesk.com/products/autodesk-access/overview - Product | |
| References | () https://www.autodesk.com/products/dwg-trueview/overview - Product | |
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0009 - Vendor Advisory | |
| First Time |
Autodesk autocad
Autodesk advance Steel Autodesk autocad Plant 3d Autodesk dwg Trueview Autodesk autocad Lt Autodesk autocad Map 3d Autodesk autocad Electrical Autodesk Autodesk autocad Mechanical Autodesk autocad Architecture Autodesk civil 3d Autodesk autocad Mep |
|
| CPE | cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:-:*:* cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2027:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2027:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:2027:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2027:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2027:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2027:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2027:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2027:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:* |
29 Jul 2026, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-29 16:17
Updated : 2026-08-11 01:38
NVD link : CVE-2026-16465
Mitre link : CVE-2026-16465
CVE.ORG link : CVE-2026-16465
JSON object : View
Products Affected
autodesk
- autocad_electrical
- dwg_trueview
- advance_steel
- autocad_architecture
- autocad
- autocad_lt
- civil_3d
- autocad_mechanical
- autocad_map_3d
- autocad_plant_3d
- autocad_mep
CWE
CWE-125
Out-of-bounds Read
