Description (CNA)
A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Autodesk / AutoCAD | affected 2026 before 2026.1 |
| Autodesk / AutoCAD LT | affected 2026 before 2026.1 |
| Autodesk / RealDWG | affected 2026 before 2026.0.2 |
| Autodesk / 3ds Max | affected 2027 before 2027.1; affected 2026 before 2026.3.3 |
CWE
CWE-426
References
- https://www.autodesk.com/products/autodesk-access/overview
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0014
ADP enrichment
No English description supplied.
No references supplied.