CVE-2026-16463
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A Heap-Based Overflow vulnerability in Autodesk AutoCAD occurs when parsing a maliciously crafted DXF file. An attacker can exploit this to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Risk Assessment
An attacker can take control of the user's system, steal data, or cause disruptions, posing a serious security threat.
Recommendation
Update Autodesk AutoCAD to the latest patched version and avoid opening DXF files from untrusted sources.
Other vulnerabilities in Autodesk AutoCAD
See all- CVE-2026-17550Medium
An Out-of-Bounds Read vulnerability in Autodesk AutoCAD when parsing a maliciously crafted DWG or DXF file can cause a crash or disclose sensitive information.
- CVE-2026-16465Medium
An Out-of-Bounds Read vulnerability in Autodesk AutoCAD when parsing a maliciously crafted DWG or DXF file can cause a crash or disclose sensitive information.
Original NVD description (English source)
A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.