Medium severity5.5NVD Advisory· Published Aug 6, 2026· Updated Oct 23, 2026

CVE-2026-7405

Description

A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service

Affected products

Autodesk/Advance Steel
cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
Range: >=2027,<2027.1
Autodesk/Autocad2 versions
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2027,<2027.1
- cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: >=2027,<2027.1
Autodesk/Autocad Architecture
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
Range: >=2027,<2027.1
Autodesk/Autocad Electrical
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
Range: >=2027,<2027.1
Autodesk/Autocad Map 3d
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
Range: >=2027,<2027.1
Autodesk/Autocad Mechanical
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
Range: >=2027,<2027.1
Autodesk/Autocad Mep
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
Range: >=2027,<2027.1
Autodesk/Autocad Plant 3d
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
Range: >=2027,<2027.1
Autodesk/Civil 3d
cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
Range: >=2027,<2027.1
Autodesk/Dwg Trueview
cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*
Range: >=2027,<2027.1
Autodesk/Revit
cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*
Range: >=2025,<2025.3.5
Autodesk/Autodesk Accessllm-fuzzy

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2026-7405

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions