CVE-2025-10884CWE-787

CVE-2025-10884

High · published December 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
19.1
In the wild
Unconfirmed
What it is

🚨 A maliciously crafted CATPART file could crash your Autodesk application, or worse, allow attackers to run arbitrary code — all thanks to a sneaky out-of-bounds write vulnerability! ⚡ Think of it like a scheming chef who sneaks in a bad ingredient that spoils the whole dish before it even reaches the table — a single faulty file can wreak havoc on your system! 🍽️ This vulnerability can lead to crashes or data corruption, and in the worst-case scenario, attackers can execute arbitrary code within the current process. This means they could potentially control your system like a puppet master, leading to devastating consequences for your data's integrity and security.

Put simply

Think of it like a scheming chef who sneaks in a bad ingredient that spoils the whole dish before it even reaches the table — a single faulty file can wreak havoc on your system! 🍽️ The vulnerability exists when a CATPART file is parsed in certain Autodesk products, allowing an attacker to write data outside the intended memory boundaries. This could cause unexpected behavior, including application crashes or arbitrary code execution.

What to do

This vulnerability can lead to crashes or data corruption, and in the worst-case scenario, attackers can execute arbitrary code within the current process. This means they could potentially control your system like a puppet master, leading to devastating consequences for your data's integrity and security. To protect your systems, ensure you update the affected Autodesk products to the latest versions that address this vulnerability. Be cautious when opening CATPART files from untrusted sources, and consider implementing file validation to block malicious content. You've got this! By taking these steps, you're on your way to securing your environment and keeping those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00278 · 19.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-16T05:16Z
Affected products (1)
ProductVersionsFixed in
autodesk/shared_components< 2026.52026.5
References (2)
EPSS history
Timeline
  • 15 DEC 23:41Z
    CATPART File Parsing Out-of-Bounds Write Vulnerability
    cvelistv5