CVE-2025-9460CWE-125

CVE-2025-9460

High · published December 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

⚡ A seemingly harmless SLDPRT file could crash your Autodesk products and reveal sensitive data! It's like inviting a rogue chef into your kitchen who just can’t follow the recipe! 🍽️ This vulnerability works like a faulty delivery system for a restaurant: the delivery driver misreads the order and brings back something completely unexpected, causing chaos in the kitchen. In this case, the malicious SLDPRT file disrupts the parsing process, allowing attackers access to sensitive information or even the ability to execute code! An attacker could exploit this vulnerability to crash the application, read confidential information, or execute arbitrary code, pushing your project off the tracks. This means potential data leaks or major disruptions, leaving you with a financial headache and a lot of cleanup to do!

Put simply

This vulnerability works like a faulty delivery system for a restaurant: the delivery driver misreads the order and brings back something completely unexpected, causing chaos in the kitchen. In this case, the malicious SLDPRT file disrupts the parsing process, allowing attackers access to sensitive information or even the ability to execute code! This Out-of-Bounds Read vulnerability occurs when a crafted SLDPRT file is processed by certain Autodesk products, leading to unexpected memory access that can crash the software or execute malicious code within the current process.

What to do

An attacker could exploit this vulnerability to crash the application, read confidential information, or execute arbitrary code, pushing your project off the tracks. This means potential data leaks or major disruptions, leaving you with a financial headache and a lot of cleanup to do! To safeguard your systems, ensure you update your Autodesk software to the latest version where this vulnerability has been addressed. Additionally, implement strict file validation measures for any SLDPRT files you receive to prevent malicious exploitation. Stay vigilant! You've got this! With the right updates and protective measures, you can keep your projects safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.6th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-12-16T05:16Z
Affected products (1)
ProductVersionsFixed in
autodesk/shared_components< 2026.52026.5
References (2)
EPSS history
Timeline
  • 15 DEC 23:38Z
    SLDPRT File Parsing Out-of-Bounds Read Vulnerability
    cvelistv5