← Back

CVE-2026-17550

nvd nist
Published: Jul 29, 2026Modified: Sep 2, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: psirt@autodesk.com (Secondary)

Description

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.

Affected (22)

Autodesk
11 products
Advance Steel
Autocad
Autocad Architecture
Autocad Electrical
Autocad Lt
Autocad Map 3d
Autocad Mechanical
Autocad Mep
Autocad Plant 3d
Civil 3d
Dwg Trueview
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Advance Steel
From 2026 to 2026.1.2
Advance Steel
Version 2027
Autodesk
Autocad
From 2026 to 2026.1.2
Autocad
Version 2027
Autodesk
Autocad Architecture
From 2026 to 2026.1.2
Autocad Architecture
Version 2027
Autodesk
Autocad Electrical
From 2026 to 2026.1.2
Autocad Electrical
Version 2027
Autodesk
Autocad Lt
From 2026 to 2026.1.2
Autocad Lt
Version 2027
Autodesk
Autocad Map 3d
From 2026 to 2026.1.2
Autocad Map 3d
Version 2027
Autodesk
Autocad Mechanical
From 2026 to 2026.1.2
Autocad Mechanical
Version 2027
Autodesk
Autocad Mep
From 2026 to 2026.1.2
Autocad Mep
Version 2027
Autodesk
Autocad Plant 3d
From 2026 to 2026.1.2
Autocad Plant 3d
Version 2027
Autodesk
Civil 3d
From 2026 to 2026.1.2
Civil 3d
Version 2027
Autodesk
Dwg Trueview
From 2026 to 2026.1.2
Dwg Trueview
Version 2027

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (3)

Source: psirt@autodesk.com
Product
Source: psirt@autodesk.com
Product
Source: psirt@autodesk.com
Vendor Advisory

Timeline

No history available yet.