A
maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/products/autodesk-access/overview | Product |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0004 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 Feb 2026, 15:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.autodesk.com/products/autodesk-access/overview - Product | |
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0004 - Vendor Advisory | |
| CPE | cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:shared_components:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:* |
|
| First Time |
Autodesk advance Steel
Autodesk autocad Architecture Autodesk autocad Electrical Autodesk Autodesk revit Autodesk autocad Plant 3d Autodesk autocad Mechanical Autodesk civil 3d Autodesk autocad Map 3d Autodesk infraworks Autodesk vault Autodesk inventor Autodesk autocad Mep Autodesk 3ds Max Autodesk shared Components Autodesk autocad Autodesk revit Lt |
18 Feb 2026, 20:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-18 20:18
Updated : 2026-02-20 15:09
NVD link : CVE-2026-0875
Mitre link : CVE-2026-0875
CVE.ORG link : CVE-2026-0875
JSON object : View
Products Affected
CWE
CWE-787
Out-of-bounds Write