High · published December 16, 2025
⚡ A maliciously crafted CATPRODUCT file can force an Out-of-Bounds Read in Autodesk products. This isn’t just a hiccup; it’s a backdoor waiting to be opened! 🔥 Think of this vulnerability like a faulty assembly line that sends parts to the wrong place. Just one misplaced file can cause the whole system to crash or even leak sensitive information, much like sending ripped blueprints to the factory floor. An attacker could exploit this flaw to crash Autodesk products, read sensitive data, or execute arbitrary code. This means your important files could be at risk, and control over the software could fall into the wrong hands—absolutely devastating!
Think of this vulnerability like a faulty assembly line that sends parts to the wrong place. Just one misplaced file can cause the whole system to crash or even leak sensitive information, much like sending ripped blueprints to the factory floor. This Out-of-Bounds Read vulnerability in Autodesk arises when certain CATPRODUCT files are parsed, allowing attackers to access data outside the intended memory space.
An attacker could exploit this flaw to crash Autodesk products, read sensitive data, or execute arbitrary code. This means your important files could be at risk, and control over the software could fall into the wrong hands—absolutely devastating! Update your Autodesk products to the latest version as soon as possible to patch this vulnerability. Additionally, be cautious when handling CATPRODUCT files from untrusted sources—better safe than sorry! You’ve got this! Strengthen your defenses and keep your data safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| autodesk/shared_components | < 2026.5 | 2026.5 |