CVE-2025-9453CWE-125

CVE-2025-9453

High · published December 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

⚡ A single malicious PRT file can exploit an Out-of-Bounds Read vulnerability in Autodesk products, potentially allowing an attacker to access sensitive data or execute arbitrary code! 🔥 Think of this vulnerability like a sneaky delivery person misplacing a package in an incorrect location—once they get access to your system, they can rummage through your files without you even knowing! 📦 An attacker could crash the application, read sensitive data, or even execute arbitrary code, putting your entire system at risk. This could lead to data breaches or unauthorized access, making it a major concern for anyone using affected Autodesk products.

Put simply

Think of this vulnerability like a sneaky delivery person misplacing a package in an incorrect location—once they get access to your system, they can rummage through your files without you even knowing! 📦 This Out-of-Bounds Read vulnerability arises when a maliciously crafted PRT file is parsed by certain Autodesk applications, allowing attackers to access memory locations they shouldn't, which could result in a crash or exploitation of the current process.

What to do

An attacker could crash the application, read sensitive data, or even execute arbitrary code, putting your entire system at risk. This could lead to data breaches or unauthorized access, making it a major concern for anyone using affected Autodesk products. To protect against this vulnerability, ensure you update your Autodesk software to the latest version available. Additionally, avoid opening untrusted PRT files and educate your users about potential threats. Stay vigilant! You've got this! Follow these steps to secure your systems and keep that data safe! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.6th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-12-16T05:16Z
Affected products (1)
ProductVersionsFixed in
autodesk/shared_components< 2026.52026.5
References (2)
EPSS history
Timeline
  • 15 DEC 23:33Z
    PRT File Parsing Out-of-Bounds Read Vulnerability
    cvelistv5