High · published December 16, 2025
⚡ A rogue SLDPRT file could turn your Autodesk environment into a playground for attackers! 💻 Think of this vulnerability like a sneaky chef who poisons a dish before serving it, causing chaos in the kitchen once someone takes a bite. In this scenario, your Autodesk software is the kitchen, and that malicious file is the poisonous dish that leads to memory corruption. An attacker could exploit this vulnerability to execute arbitrary code, potentially taking full control of your system! This could lead to unauthorized access to sensitive data, disrupting operations and causing significant damage.
Think of this vulnerability like a sneaky chef who poisons a dish before serving it, causing chaos in the kitchen once someone takes a bite. In this scenario, your Autodesk software is the kitchen, and that malicious file is the poisonous dish that leads to memory corruption. CVE-2025-9452 is a memory corruption vulnerability that occurs when a specially crafted SLDPRT file is parsed by certain Autodesk products, allowing an attacker to execute arbitrary code in the context of the current process.
An attacker could exploit this vulnerability to execute arbitrary code, potentially taking full control of your system! This could lead to unauthorized access to sensitive data, disrupting operations and causing significant damage. To protect yourself, ensure you update your Autodesk products to the latest versions immediately, and avoid opening SLDPRT files from untrusted sources. Educate your team about the risks associated with unknown file types. 🛡️ You've got this! By staying vigilant and following these steps, you can secure your Autodesk environment and keep those malicious chefs out! 🍽️💪
| Product | Versions | Fixed in |
|---|---|---|
| autodesk/shared_components | < 2026.5 | 2026.5 |