High severity7.8NVD Advisory· Published Jul 29, 2026· Updated Sep 2, 2026
CVE-2026-16463
CVE-2026-16463
Description
A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Affected products
25cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*range: >=2026,<2026.1.2
- cpe:2.3:a:autodesk:advance_steel:2027:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2026,<2026.1.2
- cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: >=2026,<2026.1.2
- cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:-:*:*
- (no CPE)
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*range: >=2026,<2026.1.2
- cpe:2.3:a:autodesk:autocad_architecture:2027:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*range: >=2026,<2026.1.2
- cpe:2.3:a:autodesk:autocad_electrical:2027:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*range: >=2026,<2026.1.2
- cpe:2.3:a:autodesk:autocad_map_3d:2027:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*range: >=2026,<2026.1.2
- cpe:2.3:a:autodesk:autocad_mechanical:2027:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*range: >=2026,<2026.1.2
- cpe:2.3:a:autodesk:autocad_mep:2027:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*range: >=2026,<2026.1.2
- cpe:2.3:a:autodesk:autocad_plant_3d:2027:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*range: >=2026,<2026.1.2
- cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.