CVE-2026-16465
published 2026-07-29CVE-2026-16465: A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this…
PriorityP428high7.1CVSS 3.1
AVLACLPRNUIRSUCHINAH
EPSS
0.26%
16.6th percentile
A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| autodesk | advance_steel | — | — |
| autodesk | advance_steel | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | autocad | — | — |
| autodesk | autocad | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | autocad | >= 2027.0.0 < 2027.1.0 | 2027.1.0 |
| autodesk | autocad_architecture | — | — |
| autodesk | autocad_architecture | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | autocad_electrical | — | — |
| autodesk | autocad_electrical | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | autocad_lt | — | — |
| autodesk | autocad_lt | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | autocad_lt | >= 2027.0.0 < 2027.1.0 | 2027.1.0 |
| autodesk | autocad_map_3d | — | — |
| autodesk | autocad_map_3d | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | autocad_mechanical | — | — |
| autodesk | autocad_mechanical | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | autocad_mep | — | — |
| autodesk | autocad_mep | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | autocad_plant_3d | — | — |
| autodesk | autocad_plant_3d | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | civil_3d | — | — |
| autodesk | civil_3d | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | dwg_trueview | — | — |
| autodesk | dwg_trueview | >= 2026 < 2026.1.2 | 2026.1.2 |
| autodesk | dwg_trueview | >= 2027.0.0 < 2027.1.0 | 2027.1.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Autodesk AutoCAD/AutoCAD LT/DWG TrueView prior 2027.1.0 DWG/DXF File out-of-bounds (WID-SEC-2026-2582)
vuldb·2026-09-02·CVSS 7.1
CVE-2026-16465 [HIGH] Autodesk AutoCAD/AutoCAD LT/DWG TrueView prior 2027.1.0 DWG/DXF File out-of-bounds (WID-SEC-2026-2582)
A vulnerability, which was classified as critical, has been found in Autodesk AutoCAD, AutoCAD LT and DWG TrueView. This vulnerability affects unknown code of the component DWG/DXF File Handler. Performing a manipulation results in out-of-bounds read.
This vulnerability is cataloged as CVE-2026-16465. It is possible to initiate the attack remotely. There is no exploit available.
It is advisable to upgrade the affected component.
GHSA
A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.
ghsa_unreviewed·2026-07-29
CVE-2026-16465 [MEDIUM] CWE-125 A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.
A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-29
Published