CVE-2026-7406: Autodesk Revit, грешка в паметта

Описание

Оригинално описание

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Засегнати продукти

• Autodesk Revit: 2027.0.0 преди 2027.1.0; 2026.0.0 преди 2026.5.0; 2025.0.0 преди 2025.5.0; 2024.0.0 преди 2024.3.5
• Autodesk AutoCAD: 2027.0.0 преди 2027.1.0; 2026.0.0 преди 2026.1.2
• Autodesk AutoCAD LT: 2027.0.0 преди 2027.1.0; 2026.0.0 преди 2026.1.2
• Autodesk DWG TrueView: 2027.0.0 преди 2027.1.0; 2026.0.0 преди 2026.1.2

Вид слабост

• CWE-822 Untrusted Pointer Dereference

История

Други уязвимости в Autodesk Revit

• 5.5CVE-2026-14255
• 5.5CVE-2026-7405
• 7.8CVE-2026-11803
• 7.8CVE-2026-8325
• 7.8CVE-2026-1289

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-7406
• https://nvd.nist.gov/vuln/detail/CVE-2026-7406
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0012
• https://www.autodesk.com/products/autodesk-access/overview