CVE-2026-7406

Description

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Traduire en français

Produits concernés

• Autodesk Revit
• Autodesk AutoCAD
• Autodesk AutoCAD LT
• Autodesk DWG TrueView
• Autodesk advance steel
• Autodesk autocad architecture
• Autodesk autocad electrical
• Autodesk autocad map 3d
• Autodesk autocad mechanical
• Autodesk autocad mep
• Autodesk autocad plant 3d
• Autodesk civil 3d

Scores CVSS

Faiblesses (CWE)

• CWE-822

Références

• https://www.autodesk.com/products/autodesk-access/overview Product
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0012 Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories