Memory Corruption in Autodesk AutoCAD Due to Malicious DGN File
CVE-2025-5048

7.8HIGH

Key Information:

Vendor

Autodesk
Status
Autocad
Autocad Lt
Autocad Architecture
Autocad Electrical
Vendor
CVE Published:
15 August 2025

What is CVE-2025-5048?

A crafted DGN file imported into Autodesk AutoCAD can trigger a memory corruption issue, allowing a malicious actor to execute arbitrary code within the context of the current process. This vulnerability highlights the risks associated with processing untrusted files within AutoCAD, emphasizing the importance of applying security patches and maintaining updated software to mitigate potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Advance Steel 2026 < 2026.1

Advance Steel 2025 < 2025.1.3

Advance Steel 2024 < 2024.1.8

References

https://www.autodesk.com/products/autodesk-access/overview
patch
https://www.autodesk.com/trust/security-advisories/adsk-s...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.