Autodesk AutoCAD DGN Parsing Vulnerabilities Advisory (CVE-2025-5046/5047/5048)

Critical Vulnerability Information Vulnerability Overview Autodesk ID: AUSK-SA-2025-0017 Product/Service/Component: Autodesk AutoCAD, Advance Steel, and Civil 3D Impact: Out-of-Bounds Read, Uninitialized Variable, Memory Corruption Severity: High Original Release Date: 08/15/2025 Last Revised Date: 08/15/2025 Vulnerability Details CVE-2025-5046: A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can lead to an Out-of-Bounds Read vulnerability. Attackers can exploit this vulnerability to cause crashes, read sensitive data, or execute arbitrary code within the current process context. CVE-2025-5047: A maliciously crafted DGN file, when parsed by Autodesk AutoCAD, can result in an Uninitialized Variable vulnerability. Attackers can exploit this to cause crashes, read sensitive data, or execute arbitrary code within the current process context. CVE-2025-5048: A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can trigger a Memory Corruption vulnerability. Attackers can exploit this to execute arbitrary code within the current process context. Affected Products Items: Autodesk AutoCAD, Autodesk AutoCAD LT, Autodesk AutoCAD Architecture, Autodesk AutoCAD Electrical, Autodesk AutoCAD Mechanical, Autodesk AutoCAD MEP, Autodesk AutoCAD Plant 3D, Autodesk Map 3D, Autodesk Civil 3D, Autodesk Advance Steel Affected Versions: 2026 Mitigated Versions: 2026.1 Recommended Actions Autodesk strongly recommends that users of affected products install the latest mitigated product versions (as listed above), available via Autodesk Access or the Accounts Portal. As a general best practice, users are also advised to open files only from trusted sources. Acknowledgments Autodesk thanks the following researchers for reporting these issues and assisting in protecting users: - Anonymous, in collaboration with Trend Micro Zero Day Initiative, reported CVE-2025-5046, CVE-2025-5047, and CVE-2025-5048

Goal Reached Thanks to every supporter — we hit 100%!

Autodesk AutoCAD DGN Parsing Vulnerabilities Advisory (CVE-2025-5046/5047/5048)