CVE-2025-10900CWE-787

CVE-2025-10900

High · published December 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

⚡ A sneaky MODEL file could lead to an Out-of-Bounds Write vulnerability in Autodesk products, making your software crash and burn! 🔥 Think of it like a restaurant where a cook mistakenly adds an ingredient that spills over into other dishes, ruining the whole meal. In this case, the malicious file causes chaos in the software, allowing for data corruption or even worse—code execution! An attacker could exploit this vulnerability to crash the application, corrupt crucial data, or seize control of the process—imagine your creative work being hijacked at a moment's notice. The potential chaos is absolutely devastating!

Put simply

Think of it like a restaurant where a cook mistakenly adds an ingredient that spills over into other dishes, ruining the whole meal. In this case, the malicious file causes chaos in the software, allowing for data corruption or even worse—code execution! This Out-of-Bounds Write vulnerability arises when certain Autodesk products parse a crafted MODEL file, enabling an attacker to overwrite memory locations and disrupt normal operations.

What to do

An attacker could exploit this vulnerability to crash the application, corrupt crucial data, or seize control of the process—imagine your creative work being hijacked at a moment's notice. The potential chaos is absolutely devastating! To safeguard against this vulnerability, update your Autodesk products to the latest version as soon as possible. Regularly monitor for patches and review your security protocols to ensure protection against malicious file uploads. You've got this! With prompt action, you can keep your applications safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-16T05:16Z
Affected products (1)
ProductVersionsFixed in
autodesk/shared_components< 2026.52026.5
References (2)
EPSS history
Timeline
  • 15 DEC 23:45Z
    MODEL File Parsing Out-of-Bounds Write Vulnerability
    cvelistv5