NetSight
medium5.5

CVE-2026-7405

A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling librar…

Impact

A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service

Affected products

VendorProductAffected versions
AutodeskAdvance Steel
from 2027 before 2027.1
AutodeskAutocad
from 2027 before 2027.1
AutodeskAutocad Architecture
from 2027 before 2027.1
AutodeskAutocad Electrical
from 2027 before 2027.1
AutodeskAutocad Lt
from 2027 before 2027.1
AutodeskAutocad Map 3d
from 2027 before 2027.1
AutodeskAutocad Mechanical
from 2027 before 2027.1
AutodeskAutocad Mep
from 2027 before 2027.1
AutodeskAutocad Plant 3d
from 2027 before 2027.1
AutodeskCivil 3d
from 2027 before 2027.1
AutodeskDwg Trueview
from 2027 before 2027.1
AutodeskRevit
from 2025 before 2025.3.5
from 2026 before 2026.5
from 2027 before 2027.1

Weakness classification

References