CVE-2025-5048

DGN File Parsing Memory Corruption Vulnerability

Published Aug 15, 2025 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-25033 A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
CPEs cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*
Type Values Removed Values Added
CPEs cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*
Type Values Removed Values Added
CPEs cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:-:*:*
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Title DGN File Parsing Memory Corruption Vulnerability
First Time appeared Autodesk
Autodesk advance Steel
Autodesk autocad
Autodesk autocad Architecture
Autodesk autocad Electrical
Autodesk autocad Lt
Autodesk autocad Map 3d
Autodesk autocad Mechanical
Autodesk autocad Mep
Autodesk autocad Plant 3d
Autodesk civil 3d
Weaknesses CWE-120
CPEs cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*
Vendors & Products Autodesk
Autodesk advance Steel
Autodesk autocad
Autodesk autocad Architecture
Autodesk autocad Electrical
Autodesk autocad Lt
Autodesk autocad Map 3d
Autodesk autocad Mechanical
Autodesk autocad Mep
Autodesk autocad Plant 3d
Autodesk civil 3d
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}