7.8
High
CVE-2025-5043 A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based…
Description
A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Shared Components 1.6 | 1.6.2.11 → < 1.7.0.10 | 1.7.0.10 |
| AutoCAD 2025 | 2025 → < 2025.1.3 | 2025.1.3 |
| AutoCAD 2024 | 2024 → < 2024.1.8 | 2024.1.8 |
| AutoCAD 2023 | 2023 → < 2023.1.8 | 2023.1.8 |
| AutoCAD Architecture 2025 | 2025 → < 2025.1.3 | 2025.1.3 |
| AutoCAD Architecture 2024 | 2024 → < 2024.1.8 | 2024.1.8 |
| AutoCAD Architecture 2023 | 2023 → < 2023.1.8 | 2023.1.8 |
| AutoCAD Electrical 2025 | 2025 → < 2025.1.3 | 2025.1.3 |
| AutoCAD Electrical 2024 | 2024 → < 2024.1.8 | 2024.1.8 |
Show the 19 other branches Hide the 19 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| AutoCAD Electrical 2023 | 2023 → < 2023.1.8 | 2023.1.8 |
| AutoCAD MAP 3D 2025 | 2025 → < 2025.1.3 | 2025.1.3 |
| AutoCAD MAP 3D 2024 | 2024 → < 2024.1.8 | 2024.1.8 |
| AutoCAD MAP 3D 2023 | 2023 → < 2023.1.8 | 2023.1.8 |
| AutoCAD Mechanical 2025 | 2025 → < 2025.1.3 | 2025.1.3 |
| AutoCAD Mechanical 2024 | 2024 → < 2024.1.8 | 2024.1.8 |
| AutoCAD Mechanical 2023 | 2023 → < 2023.1.8 | 2023.1.8 |
| AutoCAD MEP 2025 | 2025 → < 2025.1.3 | 2025.1.3 |
| AutoCAD MEP 2024 | 2024 → < 2024.1.8 | 2024.1.8 |
| AutoCAD MEP 2023 | 2023 → < 2023.1.8 | 2023.1.8 |
| AutoCAD Plant 3D 2025 | 2025 → < 2025.1.3 | 2025.1.3 |
| AutoCAD Plant 3D 2024 | 2024 → < 2024.1.8 | 2024.1.8 |
| AutoCAD Plant 3D 2023 | 2023 → < 2023.1.8 | 2023.1.8 |
| Civil 3D 2025 | 2025 → < 2025.1.3 | 2025.1.3 |
| Civil 3D 2024 | 2024 → < 2024.1.8 | 2024.1.8 |
| Civil 3D 2023 | 2023 → < 2023.1.8 | 2023.1.8 |
| Advance Steel 2025 | 2025 → < 2025.1.3 | 2025.1.3 |
| Advance Steel 2024 | 2024 → < 2024.1.8 | 2024.1.8 |
| Advance Steel 2023 | 2023 → < 2023.1.8 | 2023.1.8 |
References
- www.autodesk.com www.autodesk.com
- www.autodesk.com www.autodesk.com
Timeline
- Published
- Last modified
Other CVEs of Shared Components
The 33 CVEs of Shared Components →
CVE-2026-14255
A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion…
5.5
Medium
CVE-2026-0875
A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write…
7.8
High
CVE-2026-0874
A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write…
7.8
High
CVE-2025-10900
AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write…
7.8
High