← Back

CVE-2026-16463

nvd nist
Published: Jul 29, 2026Modified: Sep 2, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@autodesk.com (Secondary)

Description

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected (22)

Autodesk
11 products
Advance Steel
Autocad
Autocad Architecture
Autocad Electrical
Autocad Lt
Autocad Map 3d
Autocad Mechanical
Autocad Mep
Autocad Plant 3d
Civil 3d
Dwg Trueview
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Advance Steel
From 2026 to 2026.1.2
Advance Steel
Version 2027
Autodesk
Autocad
From 2026 to 2026.1.2
Autocad
Version 2027
Autodesk
Autocad Architecture
From 2026 to 2026.1.2
Autocad Architecture
Version 2027
Autodesk
Autocad Electrical
From 2026 to 2026.1.2
Autocad Electrical
Version 2027
Autodesk
Autocad Lt
From 2026 to 2026.1.2
Autocad Lt
Version 2027
Autodesk
Autocad Map 3d
From 2026 to 2026.1.2
Autocad Map 3d
Version 2027
Autodesk
Autocad Mechanical
From 2026 to 2026.1.2
Autocad Mechanical
Version 2027
Autodesk
Autocad Mep
From 2026 to 2026.1.2
Autocad Mep
Version 2027
Autodesk
Autocad Plant 3d
From 2026 to 2026.1.2
Autocad Plant 3d
Version 2027
Autodesk
Civil 3d
From 2026 to 2026.1.2
Civil 3d
Version 2027
Autodesk
Dwg Trueview
From 2026 to 2026.1.2
Dwg Trueview
Version 2027

Related CWEs

CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (3)

Source: psirt@autodesk.com
Product
Source: psirt@autodesk.com
Product
Source: psirt@autodesk.com
Vendor Advisory

Timeline

No history available yet.