CVE-2026-16463

7.8 Élevée

Publiée le 29/07/2026 à 18:17 · Modifiée le 02/09/2026 à 20:19 · Analysée par le NVD · Source : psirt@autodesk.com

Description

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Traduire en français

Produits concernés

Autodesk AutoCAD
Autodesk AutoCAD LT
Autodesk DWG TrueView
Autodesk advance steel
Autodesk autocad architecture
Autodesk autocad electrical
Autodesk autocad map 3d
Autodesk autocad mechanical
Autodesk autocad mep
Autodesk autocad plant 3d
Autodesk civil 3d

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.8 Élevée	psirt@autodesk.com	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-122

Références

https://www.autodesk.com/products/autodesk-access/overview Product
https://www.autodesk.com/products/dwg-trueview/overview Product
https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0009 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories