CVE-2026-7405

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Read in Autodesk Image Handling Library via TIF File

Publication date: 2026-08-06

Last updated on: 2026-09-04

Assigner: Autodesk

Description

A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-09-04

Generated

2026-09-16

AI Q&A

2026-08-07

EPSS Evaluated

2026-09-15

NVD

CVE-2026-7405

Affected Vendors & Products

Vendor	Product	Version / Range
autodesk	revit	From 2027 (inc) to 2027.1 (exc)
autodesk	revit	From 2026 (inc) to 2026.5 (exc)
autodesk	revit	From 2025 (inc) to 2025.3.5 (exc)
autodesk	autocad	From 2027 (inc) to 2027.1 (exc)
autodesk	dwg_trueview	From 2027 (inc) to 2027.1 (exc)
autodesk	autocad_architecture	From 2027 (inc) to 2027.1 (exc)
autodesk	advance_steel	From 2027 (inc) to 2027.1 (exc)
autodesk	civil_3d	From 2027 (inc) to 2027.1 (exc)
autodesk	autocad_plant_3d	From 2027 (inc) to 2027.1 (exc)
autodesk	autocad_electrical	From 2027 (inc) to 2027.1 (exc)
autodesk	autocad_lt	From 2027 (inc) to 2027.1 (exc)
autodesk	autocad_map_3d	From 2027 (inc) to 2027.1 (exc)
autodesk	autocad_mechanical	From 2027 (inc) to 2027.1 (exc)
autodesk	autocad_mep	From 2027 (inc) to 2027.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves a maliciously crafted TIF file that, when processed by certain Autodesk products during image import, triggers an Out-of-Bounds Read in the image handling library. This flaw can be exploited by an attacker to cause a denial of service.

Detection Guidance

This vulnerability involves a maliciously crafted TIF file causing an Out-of-Bounds Read in Autodesk products. Detection requires monitoring for crashes or errors during TIF file processing in Autodesk software. Check Autodesk application logs for segmentation faults or memory access violations when handling TIF files.

Impact Analysis

If you use affected Autodesk products to open a malicious TIF file, the vulnerability could crash the application or system, leading to a denial of service. This may disrupt your workflow or cause data loss if unsaved work is affected.

Compliance Impact

This vulnerability causes a denial of service via an Out-of-Bounds Read in Autodesk products when parsing maliciously crafted TIF files. It does not directly impact data confidentiality or integrity, so its effect on GDPR or HIPAA compliance is likely minimal unless service disruption leads to secondary compliance issues.

Mitigation Strategies

Update Autodesk products to the latest patched version to address the Out-of-Bounds Read vulnerability in TIF file parsing. Avoid opening untrusted TIF files from unknown sources until the update is applied.

Hi! I’m here to help you understand CVE-2026-7405. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70