A maliciously crafted PRT file, when linked or imported into certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
19 Aug 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
04 Aug 2025, 14:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:* cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:shared_components:2026.2:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:* |
|
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015 - Vendor Advisory | |
| First Time |
Autodesk
Autodesk vault Autodesk autocad Map 3d Autodesk autocad Architecture Autodesk infraworks Autodesk revit Lt Autodesk advance Steel Autodesk civil 3d Autodesk autocad Autodesk autocad Mechanical Autodesk autocad Electrical Autodesk 3ds Max Autodesk autocad Plant 3d Autodesk revit Autodesk autocad Mep Autodesk shared Components Autodesk inventor |
31 Jul 2025, 18:42
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
29 Jul 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-29 18:15
Updated : 2025-08-19 14:15
NVD link : CVE-2025-6635
Mitre link : CVE-2025-6635
CVE.ORG link : CVE-2025-6635
JSON object : View
Products Affected
autodesk
- infraworks
- inventor
- autocad_mep
- autocad
- autocad_architecture
- revit
- revit_lt
- autocad_plant_3d
- vault
- shared_components
- autocad_electrical
- autocad_map_3d
- autocad_mechanical
- advance_steel
- civil_3d
- 3ds_max
CWE
CWE-125
Out-of-bounds Read
