AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AutodeskCVE-2026-16463

Autodesk AutoCAD: code execution

Autodesk

CVE-2026-16463 · Published Jul 29, 2026 · updated Sep 2, 2026

High7.8
Fix: upgrade to 2027.1.0 or later (3 fixed versions below)
Autodesk advisory

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected versions

PackageAffectedFixed in
AutoCAD
Product
>= 2027.0.0, < 2027.1.02027.1.0
AutoCAD LT
Product
>= 2027.0.0, < 2027.1.02027.1.0
DWG TrueView
Product
>= 2027.0.0, < 2027.1.02027.1.0
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-122

More Autodesk advisories

All Autodesk
High 7.8Aug 6Autodesk AutoCAD: use after freeCVE-2026-1289fixed in Revit 2027.2.0 +5High 7.8Aug 6Autodesk AutoCAD: out-of-bounds readCVE-2026-11803fixed in Revit 2027.2.0 +5High 7.8Aug 4Autodesk FBX SDK: stack buffer overflowCVE-2026-10710fixed in 2020.3.10High 7.8Aug 4Autodesk FBX SDK: stack buffer overflowCVE-2026-10709fixed in 2020.3.10Medium 5.5Jul 29Autodesk AutoCAD: out-of-bounds readCVE-2026-17550fixed in 2027.1.0 +2Medium 6.1Jul 29Autodesk AutoCAD: out-of-bounds readCVE-2026-16465fixed in 2027.1.0 +2