CVE-2025-5043

A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@autodesk.com

Published

2025-07-29

Last modified

2026-05-04

Weaknesses

CWE-122

Affected products

• Autocad (Autodesk)
• Shared Components (Autodesk)

References

• https://www.autodesk.com/products/autodesk-access/overview
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015