7.8
High
CVE-2025-5039 A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to…
Description
A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AutoCAD 2026 | 2026 → < 2026.1 | 2026.1 |
| AutoCAD LT 2026 | 2026 → < 2026.1 | 2026.1 |
| AutoCAD Architecture 2026 | 2026 → < 2026.1 | 2026.1 |
| AutoCAD Electrical 2026 | 2026 → < 2026.1 | 2026.1 |
| AutoCAD Mechanical 2026 | 2026 → < 2026.1 | 2026.1 |
| AutoCAD MEP 2026 | 2026 → < 2026.1 | 2026.1 |
| AutoCAD Plant 3D 2026 | 2026 → < 2026.1 | 2026.1 |
| AutoCAD MAP 3D 2026 | 2026 → < 2026.1 | 2026.1 |
| Civil 3D 2026 | 2026 → < 2026.1 | 2026.1 |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Advance Steel 2026 | 2026 → < 2026.1 | 2026.1 |
| RealDWG 2026 | 2026 → < 2026.0.2 | 2026.0.2 |
| 3ds Max 2027 | 2027 → < 2027.1 | 2027.1 |
| 3ds Max 2026 | 2026 → < 2026.3.3 | 2026.3.3 |
References
- www.autodesk.com www.autodesk.com
- www.autodesk.com www.autodesk.com
Timeline
- Published
- Last modified
Other CVEs of AutoCAD
The 109 CVEs of AutoCAD →
CVE-2026-7406
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference…
7.8
High
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…
5.5
Medium
CVE-2026-11803
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability
7.8
High
CVE-2026-8325
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability
7.8
High