This vulnerability (CVE-2026-16465) involves an out-of-bounds read (CWE-125) in Autodesk AutoCAD when processing specially crafted DWG or DXF files. The flaw allows a malicious actor to cause a crash or disclose sensitive information by exploiting improper bounds checking during file parsing. The CVSS 3.1 base score is 6.1, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, limited confidentiality impact, no integrity impact, and high availability impact. Affected versions explicitly include AutoCAD 2026.0.0 and 2027.0.0. No vendor advisory or patch is currently available, and no known exploits have been reported.

Successful exploitation can lead to application crashes (denial of service) or limited disclosure of sensitive information. The impact on confidentiality is low, integrity is unaffected, and availability impact is high due to potential crashes. The attack requires local access and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid opening untrusted DWG or DXF files in AutoCAD versions 2026.0.0 and 2027.0.0. Monitor Autodesk's official channels for updates and patches.