Summary
Ein Angreifer kann mehrere Schwachstellen in Autodesk AutoCAD und Autodesk Civil 3D ausnutzen, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.
Product
AutoCAD ist Teil der CAD (Computer Aided Design) Produktpalette von Autodesk.
Autodesk Civil 3D ist eine Software für die Detailplanung und Dokumentation im Tief- und Infrastrukturbau.
Vulnerabilities 2
-
High 7.8
BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
-
Medium 5.5
TIF File Parsing Out-of-Bounds Read in certain Autodesk products
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service
Revision history
-
#1
Initiale Fassung
References
-
Autodesk Security Advisory vom 2026-08-06
https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0012
-
CVE Org Advisory CVE-2026-7405 vom 2026-08-06
https://www.cve.org/CVERecord?id=CVE-2026-7405
-
CVE Org Advisory CVE-2026-7406 vom 2026-08-06
https://www.cve.org/CVERecord?id=CVE-2026-7406