Autodesk Shared Components vulnerabilities

CVE-2025-7497 [HIGH] CWE-787 CVE-2025-7497: A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-B A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

CVE-2025-6637 [HIGH] CWE-787 CVE-2025-6637: A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-B A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

CVE-2025-9453 [HIGH] CWE-125 CVE-2025-9453: A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-B A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-9460 [HIGH] CWE-125 CVE-2025-9460: A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-o A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-9454 [HIGH] CWE-125 CVE-2025-9454: A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-B A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-14593 [HIGH] CWE-125 CVE-2025-14593: A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out- A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-9455 [HIGH] CWE-125 CVE-2025-9455: A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an O A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-9459 [HIGH] CWE-125 CVE-2025-9459: A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-o A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-6636 [HIGH] CWE-416 CVE-2025-6636: A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-5038 [HIGH] CWE-120 CVE-2025-5038: A maliciously crafted X_T file, when parsed through certain Autodesk products, can force a Memory Co A maliciously crafted X_T file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

CVE-2025-5043 [HIGH] CWE-122 CVE-2025-5043: A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-6635 [HIGH] CWE-125 CVE-2025-6635: A maliciously crafted PRT file, when linked or imported into certain Autodesk products, can force an A maliciously crafted PRT file, when linked or imported into certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2026-14255 [MEDIUM] CWE-674 CVE-2026-14255: A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncont A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service. Exploitation requires a user to open a specially crafted IFC file.