Autodesk AutoCAD Memory Corruption Vulnerability Allowing Arbitrary Code Execution

A memory corruption vulnerability has been identified in Autodesk AutoCAD 2026. When a maliciously crafted DGN file is linked or imported into AutoCAD, it can lead to memory corruption. This vulnerability allows a malicious actor to execute arbitrary code within the context of the current process.

Impact

Exploitation of this vulnerability could lead to memory corruption, allowing for arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to Autodesk AutoCAD 2026.1 or a more recent version. These security fixes are not included in the updates specific to individual toolsets for Autodesk Advance Steel, Autodesk Civil 3D, and the specialized toolsets of AutoCAD. For AutoCAD-based products, the latest version should be installed via Autodesk Access or the Accounts Portal.