ZDI-26-106: Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0874.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-106?
The severity of ZDI-26-106 is high due to its potential for remote code execution.
How do I fix ZDI-26-106?
To fix ZDI-26-106, ensure that Autodesk AutoCAD is updated to the latest security patch provided by Autodesk.
What type of attack is associated with ZDI-26-106?
ZDI-26-106 is associated with out-of-bounds write attacks that can lead to remote code execution.
What software versions are affected by ZDI-26-106?
All affected installations of Autodesk AutoCAD are vulnerable to ZDI-26-106, regardless of version.
Is user interaction required to exploit ZDI-26-106?
Yes, user interaction is required to exploit ZDI-26-106 as the target must open a specially crafted CATPART file.