# CVE-2026-7405: A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…

Source: https://junglewise.ai/threats/cve-2026-7405-a-maliciously-crafted-tif-file-when-parsed-through-certain  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-06  
License: CC BY 4.0 with a link back

CVE-2026-7405 · Severity: medium · CVSS 5.5 · Published 2026-08-06

A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service

Technologies: [Autodesk Advance Steel](https://junglewise.ai/threats/technologies/advance-steel), [Autodesk AutoCAD](https://junglewise.ai/threats/technologies/autocad), [Autodesk AutoCAD LT](https://junglewise.ai/threats/technologies/autocad-lt), [Autodesk Autocad Architecture](https://junglewise.ai/threats/technologies/autocad-architecture), [Autodesk Autocad Electrical](https://junglewise.ai/threats/technologies/autocad-electrical), [Autodesk Autocad Map 3d](https://junglewise.ai/threats/technologies/autocad-map-3d), [Autodesk Autocad Mechanical](https://junglewise.ai/threats/technologies/autocad-mechanical), [Autodesk Autocad Mep](https://junglewise.ai/threats/technologies/autocad-mep), [Autodesk Autocad Plant 3d](https://junglewise.ai/threats/technologies/autocad-plant-3d), [Autodesk Civil 3d](https://junglewise.ai/threats/technologies/civil-3d), [Autodesk DWG TrueView](https://junglewise.ai/threats/technologies/dwg-trueview), [Autodesk Revit](https://junglewise.ai/threats/technologies/revit). Vendors: [Autodesk](https://junglewise.ai/threats/vendors/autodesk).

## Quick answers

**Is CVE-2026-7405 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-7405 being exploited in the wild.

**How severe is CVE-2026-7405?** Medium severity, with a CVSS score of 5.5, published 6 August 2026.

**Which products and versions are affected?** Autodesk Advance Steel, Autodesk AutoCAD, Autodesk AutoCAD LT, Autodesk Autocad Architecture and 8 more. The advisory does not name versions.

**Is there a fix for CVE-2026-7405?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-7405?** Check whether you run Autodesk Advance Steel, Autodesk AutoCAD, Autodesk AutoCAD LT or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Autodesk Advance Steel
- Autodesk AutoCAD
- Autodesk AutoCAD LT
- Autodesk Autocad Architecture
- Autodesk Autocad Electrical
- Autodesk Autocad Map 3d
- Autodesk Autocad Mechanical
- Autodesk Autocad Mep
- Autodesk Autocad Plant 3d
- Autodesk Civil 3d
- Autodesk DWG TrueView
- Autodesk Revit

## Related threats

- [A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A…](https://junglewise.ai/threats/cve-2026-8325-a-maliciously-crafted-pdf-file-when-parsed-through-autodesk-revit)
- [A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer…](https://junglewise.ai/threats/cve-2026-7406-a-maliciously-crafted-bmp-file-when-parsed-through-certain)
- [A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A…](https://junglewise.ai/threats/cve-2026-1289-a-maliciously-crafted-pdf-file-when-parsed-through-autodesk-revit)
- [A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A…](https://junglewise.ai/threats/cve-2026-11803-a-maliciously-crafted-pdf-file-when-parsed-through-autodesk-revit)
- [Autodesk AutoCAD out-of-bounds read in DWG and DXF parsing](https://junglewise.ai/threats/cve-2026-17550-autodesk-autocad-out-of-bounds-read-in-dwg-and-dxf-parsing)