High · published December 16, 2025
⚡ A crafty CATPRODUCT file is all it takes to trigger an Out-of-Bounds Read in specific Autodesk products! This vulnerability could allow attackers to crash the system or even execute their own code! 🔥 Think of it like a restaurant that serves dishes based on orders from a menu, but suddenly receives a hidden recipe that crashes the kitchen's workflow or even creates a mess — that's what this CATPRODUCT file can do! An attacker could exploit this vulnerability to not only crash Autodesk applications but also potentially read sensitive data or execute arbitrary code in the current process. Imagine the chaos that could ensue if vital project data is exposed or manipulated!
Think of it like a restaurant that serves dishes based on orders from a menu, but suddenly receives a hidden recipe that crashes the kitchen's workflow or even creates a mess — that's what this CATPRODUCT file can do! This vulnerability arises when a specially crafted CATPRODUCT file is parsed, leading to an Out-of-Bounds Read that harms the normal operation of the software and can be exploited to run unauthorized code.
An attacker could exploit this vulnerability to not only crash Autodesk applications but also potentially read sensitive data or execute arbitrary code in the current process. Imagine the chaos that could ensue if vital project data is exposed or manipulated! To mitigate this, it's essential to update your Autodesk products to the latest versions that include security patches. Additionally, be cautious when handling CATPRODUCT files from untrusted sources, and consider implementing file validation mechanisms to catch suspicious files before processing. 🛡️ You've got this! Follow these steps to secure your Autodesk environment and keep those crafty attackers at bay! 🚀
| Product | Versions | Fixed in |
|---|---|---|
| autodesk/shared_components | < 2026.5 | 2026.5 |