CVE-2026-0874
Received Received - Intake

Out-of-Bounds Write in Autodesk CATPART Parsing Enables Code Execution

Publication date: 2026-02-18

Last updated on: 2026-02-20

Assigner: Autodesk

Description
A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-18
Last Modified
2026-02-20
Generated
2026-07-26
AI Q&A
2026-02-18
EPSS Evaluated
2026-07-25
NVD
CVE-2026-0874
EUVD
EUVD-2026-7938

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
autodesk shared_components to 2026.6 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability occurs when a specially crafted CATPART file is parsed by certain Autodesk products. The file can trigger an Out-of-Bounds Write, which means the software writes data outside the intended memory boundaries.

This flaw can be exploited by a malicious actor to cause the affected program to crash, corrupt data, or even execute arbitrary code within the context of the current process.

Detection Guidance

I don't know

Impact Analysis

If exploited, this vulnerability can lead to several serious impacts including application crashes, data corruption, and unauthorized code execution.

  • Crash of the Autodesk product processing the malicious CATPART file.
  • Corruption of data handled by the affected software.
  • Execution of arbitrary code, potentially allowing an attacker to take control of the affected process.
Compliance Impact

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0874. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart