Autodesk AutoCAD Out-of-Bounds Read Vulnerability Allowing Code Execution

An out-of-bounds read vulnerability has been identified in Autodesk AutoCAD 2026. This vulnerability arises when a maliciously crafted DGN file is linked or imported into AutoCAD. Exploitation of this issue can lead to a crash, unauthorized reading of sensitive data, or execution of arbitrary code within the current process context.

Impact

Exploitation of this vulnerability can cause application crashes, unauthorized access to sensitive information, or execution of arbitrary code in the context of the user running AutoCAD.

Remediation

Users are advised to update to AutoCAD 2026.1 or a more recent version. These security fixes are also available through the Autodesk Access application or the Autodesk Accounts Portal.