CVE-2026-14479

Published: Aug 12, 2026Modified: Sep 4, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: psirt@autodesk.com (Secondary)

Description

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM service to terminate unexpectedly, resulting in a denial-of-service condition.

Affected (1)

Products: Autodesk: Installer

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Autodesk Installer	Before 2.23

Related CWEs

Improper Validation of Specified Index, Position, or Offset in Input

The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.

References (2)

https://emsfs.autodesk.com/utility/odis/1/installer/latest/AdODIS-installer.exe

Source: psirt@autodesk.com

Product

https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0013

Source: psirt@autodesk.com

Vendor Advisory

Timeline

No history available yet.