CVE-2026-7405

TIF File Parsing Out-of-Bounds Read in certain Autodesk products

State: Published
Severity: 5.5 Medium
Published: Aug 6, 2026
Updated: Sep 18, 2026
Reserved: Apr 29, 2026

Description

A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	autodesk

Weaknesses

CWE-125 Out-of-Bounds Read

Affected Products

Product	Versions
RevitAutodesk	2027.0.0 to before 2027.1.0Affected 2026.0.0 to before 2026.5.0Affected 2025.0.0 to before 2025.5.0Affected 2024.0.0 to before 2024.3.5Affected
AutoCADAutodesk	2027.0.0 to before 2027.1.0Affected 2026.0.0 to before 2026.1.2Affected
AutoCAD LTAutodesk	2027.0.0 to before 2027.1.0Affected 2026.0.0 to before 2026.1.2Affected
DWG TrueViewAutodesk	2027.0.0 to before 2027.1.0Affected 2026.0.0 to before 2026.1.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.