CVE-2026-16463

ALTO 7.8CVE-2026-16463 · Published 29/07/2026 · updated 02/09/2026

Package	Affected versions	Patched versions
advance steel autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`
autocad autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`
autocad architecture autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`
autocad electrical autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`
autocad lt autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`
autocad map 3d autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`
autocad mechanical autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`
autocad mep autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`
autocad plant 3d autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`
civil 3d autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`
dwg trueview autodesk	`= 2027≥ 2026, < 2026.1.2`	`2026.1.2`

Description

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

References

autodesk.com/products/autodesk-access/overview · Product
autodesk.com/products/dwg-trueview/overview · Product
autodesk.com/trust/security-advisories/adsk-sa-2026-0009 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free