7.8
High
CVE-2026-7406 A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference…
Description
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Revit 2027.0 | 2027.0.0 → < 2027.1.0 | 2027.1.0 |
| Revit 2026.0 | 2026.0.0 → < 2026.5.0 | 2026.5.0 |
| Revit 2025.0 | 2025.0.0 → < 2025.5.0 | 2025.5.0 |
| Revit 2024.0 | 2024.0.0 → < 2024.3.5 | 2024.3.5 |
| AutoCAD 2027.0 | 2027.0.0 → < 2027.1.0 | 2027.1.0 |
| AutoCAD 2026.0 | 2026.0.0 → < 2026.1.2 | 2026.1.2 |
| AutoCAD LT 2027.0 | 2027.0.0 → < 2027.1.0 | 2027.1.0 |
| AutoCAD LT 2026.0 | 2026.0.0 → < 2026.1.2 | 2026.1.2 |
| DWG TrueView 2027.0 | 2027.0.0 → < 2027.1.0 | 2027.1.0 |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| DWG TrueView 2026.0 | 2026.0.0 → < 2026.1.2 | 2026.1.2 |
References
- www.autodesk.com www.autodesk.com
- www.autodesk.com www.autodesk.com
Timeline
- Published
- Last modified
Other CVEs of Revit
The 26 CVEs of Revit →
CVE-2026-14255
A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion…
5.5
Medium
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…
5.5
Medium
CVE-2026-11803
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability
7.8
High
CVE-2026-8325
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability
7.8
High