CVE-2026-8325

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8325", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "state": "PUBLISHED", "assignerShortName": "autodesk", "dateReserved": "2026-05-11T14:02:24.198Z", "datePublished": "2026-08-06T15:58:02.242Z", "dateUpdated": "2026-10-19T12:24:17.192Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2026-10-19T12:24:17.192Z"}, "title": "PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-787", "description": "CWE-787 Out-of-Bounds Write", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "Autodesk", "product": "Revit", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.2.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.5.0", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.4.6", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.3.6", "versionType": "semver"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"]}, {"vendor": "Autodesk", "product": "AutoCAD", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"]}, {"vendor": "Autodesk", "product": "AutoCAD LT", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*"]}, {"vendor": "Autodesk", "product": "DWG TrueView", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2024:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."}]}], "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011", "tags": ["vendor-advisory"]}, {"url": "https://www.autodesk.com/products/autodesk-access/overview", "tags": ["patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-07T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-8325"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-08T03:55:30.658Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-8325", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-07T15:24:35.127789Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-07T15:24:48.724Z"}}], "cna": {"title": "PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Revit", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.2.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.5.0", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.4.6", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.3.6", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD LT", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "DWG TrueView", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011", "tags": ["vendor-advisory"]}, {"url": "https://www.autodesk.com/products/autodesk-access/overview", "tags": ["patch"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.", "supportingMedia": [{"type": "text/html", "value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-Bounds Write"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2026-10-19T12:24:17.192Z"}}}, "cveMetadata": {"cveId": "CVE-2026-8325", "state": "PUBLISHED", "dateUpdated": "2026-10-19T12:24:17.192Z", "dateReserved": "2026-05-11T14:02:24.198Z", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "datePublished": "2026-08-06T15:58:02.242Z", "assignerShortName": "autodesk"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Revit", "vendor": "Autodesk", "versions": [{"lessThan": "2027.2.0", "status": "affected", "version": "2027.0.0", "versionType": "semver"}, {"lessThan": "2026.5.0", "status": "affected", "version": "2026.0.0", "versionType": "semver"}, {"lessThan": "2025.4.6", "status": "affected", "version": "2025.0.0", "versionType": "semver"}, {"lessThan": "2024.3.6", "status": "affected", "version": "2024.0.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD", "vendor": "Autodesk", "versions": [{"lessThan": "2027.1.0", "status": "affected", "version": "2027.0.0", "versionType": "semver"}, {"lessThan": "2026.1.2", "status": "affected", "version": "2026.0.0", "versionType": "semver"}, {"lessThan": "2025.1.4", "status": "affected", "version": "2025.0.0", "versionType": "semver"}, {"lessThan": "2024.1.9", "status": "affected", "version": "2024.0.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD LT", "vendor": "Autodesk", "versions": [{"lessThan": "2027.1.0", "status": "affected", "version": "2027.0.0", "versionType": "semver"}, {"lessThan": "2026.1.2", "status": "affected", "version": "2026.0.0", "versionType": "semver"}, {"lessThan": "2025.1.4", "status": "affected", "version": "2025.0.0", "versionType": "semver"}, {"lessThan": "2024.1.9", "status": "affected", "version": "2024.0.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2024:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "DWG TrueView", "vendor": "Autodesk", "versions": [{"lessThan": "2027.1.0", "status": "affected", "version": "2027.0.0", "versionType": "semver"}, {"lessThan": "2026.1.2", "status": "affected", "version": "2026.0.0", "versionType": "semver"}, {"lessThan": "2025.1.4", "status": "affected", "version": "2025.0.0", "versionType": "semver"}, {"lessThan": "2024.1.9", "status": "affected", "version": "2024.0.0", "versionType": "semver"}]}], "source": "psirt@autodesk.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*", "matchCriteriaId": "4ADB4CB5-ABEE-4207-9CE0-AA3FFA82B502", "versionEndExcluding": "2024.3.6", "versionStartIncluding": "2024", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A7544FC-BE0C-4A36-A5D9-1E96398038A7", "versionEndExcluding": "2025.4.6", "versionStartIncluding": "2025", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D3A12A9-E8C2-4D85-B7C7-9392F2DFCA83", "versionEndExcluding": "2026.5", "versionStartIncluding": "2026", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*", "matchCriteriaId": "9136E308-DC53-429E-B4C3-0BA4F16ED9D1", "versionEndExcluding": "2027.2", "versionStartIncluding": "2027", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Un archivo PDF creado maliciosamente, al ser analizado por Autodesk Revit, puede forzar una vulnerabilidad de escritura fuera de l\u00edmites. Un actor malicioso puede aprovechar esta vulnerabilidad para provocar un bloqueo, causar corrupci\u00f3n de datos o ejecutar c\u00f3digo arbitrario en el contexto del proceso actual."}], "id": "CVE-2026-8325", "lastModified": "2026-10-24T13:10:00.147", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "psirt@autodesk.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8325", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-07T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-08-06T22:18:33.243", "references": [{"source": "psirt@autodesk.com", "tags": ["Product"], "url": "https://www.autodesk.com/products/autodesk-access/overview"}, {"source": "psirt@autodesk.com", "tags": ["Vendor Advisory"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011"}], "sourceIdentifier": "psirt@autodesk.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "psirt@autodesk.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2027.0.0,2027.2.0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2026.0.0,2026.5.0)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Revit", "source": "cna", "vendor": "Autodesk"}, "product": "revit", "vendor": "autodesk"}], "created": "2026-08-07T01:15:05.058658+00:00", "updated": "2026-10-19T14:15:06.978484+00:00", "vendors": ["autodesk", "autodesk$PRODUCT$revit"]}