CVE-2026-7405: A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-7405
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-7405 | coverage & exploitation status | NVD · CVE.org |
Recent advisories for A maliciously crafted
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- highCVE-2026-8325: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds …nvd · 2026-08-06
- highCVE-2026-7406: A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untr…nvd · 2026-08-06
- highCVE-2026-1289: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free …nvd · 2026-08-06
- highCVE-2026-11803: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds…nvd · 2026-08-06
- highCVE-2026-18657: An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a…nvd · 2026-08-04
- highCVE-2026-18656: An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow …nvd · 2026-08-04
More from NVD Recent CVEs
- highCVE-2026-8325: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds …2026-08-06
- highCVE-2026-7867: A flaw was found in udisks2. A local attacker with an active console session can exploit insuff…2026-08-06
- highCVE-2026-7406: A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untr…2026-08-06
- mediumCVE-2026-71555: PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. From 2.…2026-08-06
- mediumCVE-2026-71554: h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.…2026-08-06