CVE-2025-5047

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-457

Affected software

No affected versions have been published.

Timeline

Published: Aug 15, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-504729.8The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the `l CVE-2025-504759.8An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute CVE-2025-504775.4A URL redirection in lbry-desktop v0.53.9 allows attackers to redirect victim users to attacker-controlled pages.CVE-2025-50487.8A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious acto CVE-2025-504814.8A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary CVE-2025-504847.1Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session h CVE-2025-504857.1Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to ex CVE-2025-504867.1Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to exec CVE-2025-504877.1Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows att CVE-2025-504887.1Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attac CVE-2025-504897.5Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attacker CVE-2025-50499.8A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. This vulnerability affects unknown code of the comp