CVE-2025-14593CWE-125

CVE-2025-14593

High · published December 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

⚡ A cleverly crafted CATPART file can lead to a serious Out-of-Bounds Read vulnerability in Autodesk products! This could allow a malicious actor to crash your application or even execute arbitrary code in the current process. 🔥 Think of it like a chef accidentally leaving a dangerous ingredient in the kitchen — one small oversight in the recipe can spoil the entire meal, potentially causing chaos at the dinner party! If exploited, this vulnerability could allow an attacker to crash your application, access sensitive data, or run arbitrary code. This could be absolutely devastating for users, especially in critical design and engineering environments where security is paramount!

Put simply

Think of it like a chef accidentally leaving a dangerous ingredient in the kitchen — one small oversight in the recipe can spoil the entire meal, potentially causing chaos at the dinner party! This Out-of-Bounds Read vulnerability occurs when a maliciously crafted CATPART file is processed by certain Autodesk products, leading to improper memory access that could be leveraged by attackers to disrupt operations or access sensitive information.

What to do

If exploited, this vulnerability could allow an attacker to crash your application, access sensitive data, or run arbitrary code. This could be absolutely devastating for users, especially in critical design and engineering environments where security is paramount! Immediately patch your Autodesk software to the latest version that addresses CVE-2025-14593. Ensure proper file validation practices are in place to avoid processing untrusted CATPART files. Conduct a thorough assessment of your systems to identify any instances of impacted software. You've got this! Following these steps will help secure your environment and keep those pesky vulnerabilities at bay. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.6th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-12-16T05:16Z
Affected products (1)
ProductVersionsFixed in
autodesk/shared_components< 2026.52026.5
References (2)
EPSS history
Timeline
  • 15 DEC 23:31Z
    CATPART File Parsing Out-of-Bounds Read Vulnerability
    cvelistv5