A
maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/products/autodesk-access/overview | Product |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0019 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
22 Jan 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-122 |
19 Nov 2025, 14:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.autodesk.com/products/autodesk-access/overview - Product | |
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0019 - Vendor Advisory | |
| CPE | cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:shared_components:2026.3:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:* |
|
| First Time |
Autodesk autocad Architecture
Autodesk autocad Electrical Autodesk vault Autodesk shared Components Autodesk revit Lt Autodesk autocad Autodesk advance Steel Autodesk autocad Mep Autodesk inventor Autodesk civil 3d Autodesk Autodesk autocad Map 3d Autodesk revit Autodesk autocad Plant 3d Autodesk 3ds Max Autodesk infraworks Autodesk autocad Mechanical |
|
| CWE | CWE-787 |
07 Nov 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-07 18:15
Updated : 2026-01-22 15:16
NVD link : CVE-2025-9458
Mitre link : CVE-2025-9458
CVE.ORG link : CVE-2025-9458
JSON object : View
Products Affected