Skip to content
OpenAdvisories
High · 7.8 CVE-2025-5048 EUVD-2025-25033GHSA-h784-824v-jrpw

DGN File Parsing Memory Corruption Vulnerability

Published Aug 15, 2025 · Updated Feb 26, 2026 · Assigned by autodesk

Vendor: Autodesk Product: Advance Steel Product: AutoCAD Product: AutoCAD Architecture Product: AutoCAD Electrical Product: AutoCAD LT Product: AutoCAD MAP 3D Product: AutoCAD Mechanical Product: AutoCAD MEP Product: AutoCAD Plant 3D Product: Civil 3D

Description

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products

VendorProductAffectedFixed
Autodesk AutoCAD 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8 2026.1
Autodesk AutoCAD LT 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8 2026.1
Autodesk AutoCAD Architecture 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8 2026.1
Autodesk AutoCAD Electrical 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8 2026.1
Autodesk AutoCAD MAP 3D 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8 2026.1
Autodesk AutoCAD Mechanical 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8 2026.1
Autodesk AutoCAD MEP 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8 2026.1
Autodesk AutoCAD Plant 3D 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8 2026.1
Autodesk Civil 3D 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8 2026.1
Autodesk Advance Steel 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8 2026.1

Advisories 1

References