CVE-2026-7406

Received Received - Intake

Untrusted Pointer Dereference in Autodesk Products via Malicious BMP File

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: Autodesk

Description

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-06

Generated

2026-08-07

AI Q&A

2026-08-07

EPSS Evaluated

N/A

NVD

CVE-2026-7406

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-822	The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

Attack-Flow Graph

Executive Summary

This vulnerability involves a maliciously crafted BMP file that, when processed by certain Autodesk products, triggers a Untrusted Pointer Dereference. This flaw allows an attacker to execute arbitrary code within the current process context.

Detection Guidance

Detection of this vulnerability requires inspecting Autodesk products for processing of maliciously crafted BMP files. Monitor for crashes or unusual behavior when opening BMP files in Autodesk software. Check logs for untrusted pointer dereference errors. Ensure all Autodesk products are updated to the latest patched versions.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your system, potentially leading to data theft, system damage, or unauthorized access. It may also enable further attacks within your network.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling arbitrary code execution through malicious BMP files. If exploited, it may lead to unauthorized access to sensitive data, violating confidentiality requirements under these regulations.

Mitigation Strategies

Update Autodesk products to the latest patched versions to prevent exploitation through maliciously crafted BMP files.

Hi! I’m here to help you understand CVE-2026-7406. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70