A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-5046 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious DGN file and convince a user to link or import it into Autodesk AutoCAD. Once the file is processed, the vulnerability can be triggered, potentially leading to a crash or unauthorized access to sensitive information.
Affected Products
- Autodesk AutoCAD: Affected by the Out-of-Bounds Read vulnerability when handling DGN files.
Mitigation
Users are advised to avoid opening untrusted DGN files and to ensure that their Autodesk AutoCAD software is updated to the latest version to mitigate the risk of exploitation.