Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-5039

Privilege Ecalation due to Untrusted Search Path Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
autodesk

Description

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Autodesk AutoCAD

Default version status: unaffected

  • 2026 to < 2026.1affected

Autodesk AutoCAD LT

Default version status: unaffected

  • 2026 to < 2026.1affected

Autodesk RealDWG

Default version status: unaffected

  • 2026 to < 2026.0.2affected

Autodesk 3ds Max

Default version status: unaffected

  • 2027 to < 2027.1affected
  • 2026 to < 2026.3.3affected

References