5.5
Medium
CVE-2026-14479 A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper…
Description
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM service to terminate unexpectedly, resulting in a denial-of-service condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Installer 2.22 | 2.22.0 → < 2.23.0 | 2.23.0 |
Other CVEs of Installer
The 5 CVEs of Installer →
CVE-2026-14478
A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to…
7.8
High
CVE-2025-10885
A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT…
7.8
High
CVE-2025-5335
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to…
7.8
High
CVE-2024-9500
A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer…
7.8
High