Description

A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.5",
  "pubDate": "2026-08-06T22:18:32.707Z",
  "pubdate": "2026-08-06T22:18:32.707Z",
  "executiveSummary": "An Out-of-Bounds Read vulnerability exists within certain Autodesk products during the parsing of maliciously crafted TIF image files. This memory corruption flaw is triggered specifically during the image import process handled by the application's internal image handling library. Successful exploitation of this vulnerability allows an unauthenticated adversary to cause a denial of service condition, leading to application crashes and potential operational disruption. The attack vector requires user interaction, specifically tricking a victim into importing or opening a specially crafted TIF file within the vulnerable software. The inherent risk lies in the potential for unexpected application termination, impacting user workflow and system availability. No specific privilege requirements or complex network exposures are mandated for the attacker beyond the delivery of the malicious file to the target user environment.",
  "technicalDetails": "The vulnerability stems from improper bounds checking within the image handling library utilized by certain Autodesk products when processing specific structural elements of a TIF file. Specifically, when the parser reads malicious header metadata or image dimensions that do not accurately reflect the actual allocated buffer size, an Out-of-Bounds Read occurs. The root cause is rooted in unsafe memory access operations where the parsing logic reads past the boundaries of the allocated heap or stack buffer during data ingestion. The attack flow begins when a user initiates an image import operation of the maliciously crafted TIF file. As the vulnerable component processes the file structure, it attempts to read image scanlines or metadata tags using offsets specified within the file itself. Because these offsets lack proper validation against the true bounds of the memory region, the parsing routine reads adjacent memory locations. Depending on the memory layout and the specific data read, this unauthorized read operation triggers an access violation, resulting in an immediate application crash and achieving a denial of service. The affected component is the internal image parsing library responsible for handling raster formats. Exploitation requires local user interaction to open or import the file, and the vulnerability can be triggered without prior authentication or elevated privileges. Network exposure is not strictly required unless the file is processed automatically via network-connected automated ingestion pipelines that utilize the vulnerable Autodesk libraries."
}