Memory Corruption in Autodesk AutoCAD Due to Malicious DGN File
CVE-2025-5048

7.8HIGH

Key Information:

Vendor

Autodesk
Status
Autocad
Autocad Lt
Autocad Architecture
Autocad Electrical
Vendor
CVE Published:
15 August 2025

What is CVE-2025-5048?

A crafted DGN file imported into Autodesk AutoCAD can trigger a memory corruption issue, allowing a malicious actor to execute arbitrary code within the context of the current process. This vulnerability highlights the risks associated with processing untrusted files within AutoCAD, emphasizing the importance of applying security patches and maintaining updated software to mitigate potential exploits.

Affected Version(s)

Advance Steel 2026 < 2026.1

AutoCAD 2026 < 2026.1

AutoCAD Architecture 2026 < 2026.1

References

https://www.autodesk.com/products/autodesk-access/overview
patch
https://www.autodesk.com/trust/security-advisories/adsk-s...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-5048 : Memory Corruption in Autodesk AutoCAD Due to Malicious DGN File