CVE-2025-5043

3DM File Parsing Heap-Based Overflow Vulnerability

State: Published
Severity: 7.8 High
Published: Jul 29, 2025
Updated: May 4, 2026
Reserved: May 21, 2025

Description

A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	autodesk

Weaknesses

CWE-122 Heap-Based Buffer Overflow

Affected Products

Product	Versions
Shared ComponentsAutodesk	1.6.2.11 to before 1.7.0.10Affected
AutoCADAutodesk	2025 to before 2025.1.3Affected 2024 to before 2024.1.8Affected 2023 to before 2023.1.8Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.