This vulnerability (CWE-125) arises from an out-of-bounds read condition when AutoCAD processes maliciously crafted DWG or DXF files. Exploitation can lead to application crashes or information disclosure. The affected product is Autodesk AutoCAD, specifically versions 2026.0.0 and 2027.0.0. The CVSS vector indicates local attack vector with low complexity, no privileges required, user interaction needed, unchanged scope, no confidentiality or integrity impact, but high availability impact due to crashes. No vendor advisory or patch is currently available, and no active exploitation is known.

Successful exploitation can cause AutoCAD to crash, resulting in denial of service. There is also potential for sensitive information disclosure due to the out-of-bounds read. However, confidentiality and integrity impacts are not indicated by the CVSS vector. The medium severity rating reflects the availability impact and the need for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should exercise caution when opening DWG or DXF files from untrusted sources to avoid triggering the vulnerability.