Heap-Based Overflow in Autodesk Products Caused by Malicious 3DM Files
CVE-2025-5043

7.8HIGH

Key Information:

Vendor

Autodesk
Status
Shared Components
Vendor
CVE Published:
29 July 2025

What is CVE-2025-5043?

A vulnerability exists in various Autodesk products that allows for a heap-based overflow when a specially crafted 3DM file is linked or imported. This may lead to application crashes, unauthorized access to sensitive data, or the execution of arbitrary code within the context of the process, posing significant security risks to users.

Affected Version(s)

Shared Components 2026.2 < 2026.3

References

https://www.autodesk.com/trust/security-advisories/adsk-s...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-5043 : Heap-Based Overflow in Autodesk Products Caused by Malicious 3DM Files