Description

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM service to terminate unexpectedly, resulting in a denial-of-service condition.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.5",
  "pubDate": "2026-08-12T15:17:31.830Z",
  "pubdate": "2026-08-12T15:17:31.830Z",
  "executiveSummary": "This vulnerability involves an improper input validation flaw residing within the Autodesk Installer IPC frame parser.\nSpecifically, the component fails to properly validate an input-specified position or offset, leading directly to an out-of-range substring operation during IPC message processing.\nSuccessful exploitation of this flaw allows a malicious actor to force the high-privilege NT AUTHORITY\\SYSTEM service to terminate unexpectedly.\nThe primary impact of this out-of-bounds memory or string handling condition is a local denial-of-service (DoS) state, disrupting critical installer operations and service availability.\nAttack execution requires an attacker to supply a maliciously crafted input to the vulnerable IPC frame parser.\nNo specific authentication or advanced privilege requirements are detailed beyond the ability to interact with the target IPC mechanism, though the resulting crash impacts system-level architecture.",
  "technicalDetails": "The root cause of the vulnerability stems from inadequate bounds checking and improper input validation on position or offset values handled by the Autodesk Installer IPC frame parser.\nWhen the vulnerable component parses inter-process communication frames, it reads attacker-controlled offset or position parameters without verifying whether they fall within the legitimate boundaries of the allocated buffer or string data structure.\nUpon processing a maliciously crafted input containing manipulated offset indicators, the parsing logic attempts to execute an out-of-range substring operation.\nThis invalid memory access or out-of-bounds read/manipulation triggers an unhandled exception within the context of the underlying service.\nBecause the affected process operates under the authority of the NT AUTHORITY\\SYSTEM service account, the unhandled crash forces the immediate and unexpected termination of this core service.\nThe attack flow follows a sequential pattern: first, the adversary crafts a specialized payload designed to exploit the missing offset validation within the IPC communication channel; second, the payload is transmitted to the Autodesk Installer IPC frame parser; third, the parser attempts the erroneous substring extraction; and fourth, the resulting exception causes the host service to crash, achieving the denial-of-service impact.\nThe vulnerable component is explicitly the Autodesk Installer IPC frame parser.\nPost-exploitation impact is limited to service unavailability and denial of service via process termination, with no direct privilege escalation or remote code execution vectors described from this specific condition."
}