CVE-2026-16465
Received Received - Intake

Out-of-Bounds Read in AutoCAD via Malicious DWG/DXF File

Vulnerability report for CVE-2026-16465, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-07-29

Last updated on: 2026-07-29

Assigner: Autodesk

Description

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-29
Last Modified
2026-07-29
Generated
2026-07-30
AI Q&A
2026-07-30
EPSS Evaluated
N/A
NVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
autodesk autocad *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a maliciously crafted DWG or DXF file that, when opened in Autodesk AutoCAD, triggers an Out-of-Bounds Read. This occurs when the software attempts to read data outside the intended memory buffer, potentially leading to crashes or unauthorized access to sensitive information.

Detection Guidance

Detection involves monitoring for crashes or unusual behavior when processing DWG or DXF files in Autodesk AutoCAD. Check system logs for application crashes or memory access violations during file parsing. No specific commands are provided in the context.

Impact Analysis

The impact includes system crashes when opening affected files, which could disrupt workflows. Additionally, sensitive information might be disclosed if the vulnerability is exploited, posing risks to data confidentiality.

Mitigation Strategies

Avoid opening untrusted DWG or DXF files in Autodesk AutoCAD. Update AutoCAD to the latest patched version if available. Implement file validation and sandboxing for suspicious files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16465. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart