CVE-2026-7406 in AutoCAD

Résumé

par MITRE • 07/08/2026

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: Autodesk
• Réserver: 29/04/2026
• Divulgation: 07/08/2026
• Modérer: accepté
• Entrée: VDB-386895
• CPE: prêt
• CWE: CWE-476 (confirmé)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: non
• Activités: faible
• Secteur: Industry, Lawfirm, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7406
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7406
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7406/