CVE-2025-9458CWE-122CWE-787

CVE-2025-9458

High · published November 7, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

🚨 A cleverly crafted PRT file could unleash chaos! This memory corruption flaw in certain Autodesk products allows an attacker to run arbitrary code without breaking a sweat. ⚡ Think of this vulnerability like a faulty factory machine that misinterprets the assembly instructions — a small error in the blueprints could lead to a catastrophic failure in the output. In the digital world, this means a simple file can lead to devastating consequences for systems. An attacker could exploit this flaw to execute their own code, potentially gaining full control over affected systems. This could result in unauthorized access to sensitive data, disruption of critical services, or even complete system compromise — absolutely devastating!

Put simply

Think of this vulnerability like a faulty factory machine that misinterprets the assembly instructions — a small error in the blueprints could lead to a catastrophic failure in the output. In the digital world, this means a simple file can lead to devastating consequences for systems. This vulnerability exists due to improper parsing of maliciously crafted PRT files in Autodesk products, leading to memory corruption that attackers can exploit to execute arbitrary code in the current process context.

What to do

An attacker could exploit this flaw to execute their own code, potentially gaining full control over affected systems. This could result in unauthorized access to sensitive data, disruption of critical services, or even complete system compromise — absolutely devastating! To safeguard your systems, update to the latest version of Autodesk software as soon as patches are available. Review and validate any PRT files before processing them to ensure they are from trusted sources. Implement monitoring for unusual activity that may indicate exploitation attempts. You've got this! With the right updates and vigilance, you can lock this down tight! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-11-07T23:15Z
Affected products (1)
ProductVersionsFixed in
autodesk/shared_componentsall versions—
References (2)
EPSS history
Timeline
  • 07 NOV 18:01Z
    PRT File Parsing Memory Corruption Vulnerability
    cvelistv5