CVE-2025-9457CWE-122CWE-787

CVE-2025-9457

High · published December 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

⚡ A cleverly crafted PRT file holds the key to a sneaky memory corruption vulnerability in Autodesk products! Think of it like a chef secretly swapping out ingredients: if they toss in a rogue spice, the whole dish could go haywire! In this case, the PRT file can make the software digest inappropriate code, leading to unexpected flavors of chaos. An attacker could exploit this vulnerability to execute arbitrary code within the current process, potentially gaining full control over the application. This means they could manipulate data, steal sensitive information, or even disrupt the entire system. This kind of attack could lead to catastrophic consequences if left unchecked!

Put simply

Think of it like a chef secretly swapping out ingredients: if they toss in a rogue spice, the whole dish could go haywire! In this case, the PRT file can make the software digest inappropriate code, leading to unexpected flavors of chaos. This vulnerability arises when a malicious PRT file is parsed by certain Autodesk products, causing memory corruption that allows arbitrary code execution. Essentially, the software is tricked into executing harmful commands due to improper handling of the PRT file.

What to do

An attacker could exploit this vulnerability to execute arbitrary code within the current process, potentially gaining full control over the application. This means they could manipulate data, steal sensitive information, or even disrupt the entire system. This kind of attack could lead to catastrophic consequences if left unchecked! It's crucial to patch affected Autodesk products immediately to defend against this vulnerability. Users should stay updated with the latest security releases and ensure that their systems are equipped with the necessary defenses to validate file integrity before processing. Regular security training can also help users recognize and avoid potentially malicious files. You can tackle this! Keep your software up-to-date and follow best practices, and you'll have this vulnerability locked down in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-12-16T05:16Z
Affected products (1)
ProductVersionsFixed in
autodesk/shared_components< 2026.52026.5
References (2)
EPSS history
Timeline
  • 15 DEC 23:37Z
    PRT File Parsing Memory Corruption Vulnerability
    cvelistv5