Out-of-Bounds Read in Autodesk Image Handling Library via TIF File

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: Autodesk

Description

A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-06

Generated

2026-08-07

AI Q&A

2026-08-07

EPSS Evaluated

N/A

NVD

CVE-2026-7405

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves a maliciously crafted TIF file that, when processed by certain Autodesk products during image import, triggers an Out-of-Bounds Read in the image handling library. This flaw can be exploited by an attacker to cause a denial of service.

Impact Analysis

If you use affected Autodesk products to open a malicious TIF file, the vulnerability could crash the application or system, leading to a denial of service. This may disrupt your workflow or cause data loss if unsaved work is affected.

Mitigation Strategies

Update Autodesk products to the latest patched version to address the Out-of-Bounds Read vulnerability in TIF file parsing. Avoid opening untrusted TIF files from unknown sources until the update is applied.

Hi! I’m here to help you understand CVE-2026-7405. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70