CVE-2025-10898CWE-787

CVE-2025-10898

High · published December 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

⚡ A cleverly crafted MODEL file can ignite an Out-of-Bounds Write vulnerability in certain Autodesk products! This means trouble for anyone using them. 🔥 Think of it like a construction crew that accidentally uses the wrong blueprint—suddenly, your building is at risk of collapsing because structural integrity wasn't checked. In this case, the MODEL file is the rogue blueprint wreaking havoc. An attacker could cause the software to crash, corrupt critical data, or even run arbitrary code, all while posing as a seemingly harmless file. This could lead to extensive data loss or unauthorized access, making the situation absolutely devastating!

Put simply

Think of it like a construction crew that accidentally uses the wrong blueprint—suddenly, your building is at risk of collapsing because structural integrity wasn't checked. In this case, the MODEL file is the rogue blueprint wreaking havoc. This vulnerability occurs when Autodesk products fail to properly validate and manage memory for specially crafted MODEL files, allowing an out-of-bounds write that can disrupt the normal flow of execution.

What to do

An attacker could cause the software to crash, corrupt critical data, or even run arbitrary code, all while posing as a seemingly harmless file. This could lead to extensive data loss or unauthorized access, making the situation absolutely devastating! To protect your systems, ensure that you're running the latest version of Autodesk products that include security patches addressing this flaw. Monitor your files closely and restrict permissions on untrusted MODEL files. You've got this! By taking these steps, you can secure your software and keep those pesky vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.6th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-16T05:16Z
Affected products (1)
ProductVersionsFixed in
autodesk/shared_components< 2026.52026.5
References (2)
EPSS history
Timeline
  • 15 DEC 23:44Z
    MODEL File Parsing Out-of-Bounds Write Vulnerability
    cvelistv5