A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/products/autodesk-access/overview | Product |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0018 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
Configuration 10 (hide)
|
Configuration 11 (hide)
|
History
19 Sep 2025, 13:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* |
|
| First Time |
Autodesk civil 3d
Autodesk Autodesk autocad Autodesk autocad Mechanical Autodesk autocad Map 3d Autodesk autocad Electrical Autodesk autocad Plant 3d Autodesk revit Autodesk autocad Mep Autodesk autocad Lt Autodesk autocad Architecture Autodesk advance Steel |
|
| References | () https://www.autodesk.com/products/autodesk-access/overview - Product | |
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0018 - Vendor Advisory |
16 Sep 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-16 15:15
Updated : 2025-09-19 13:51
NVD link : CVE-2025-8894
Mitre link : CVE-2025-8894
CVE.ORG link : CVE-2025-8894
JSON object : View
Products Affected
autodesk
- autocad_lt
- autocad_mep
- autocad
- autocad_architecture
- revit
- autocad_plant_3d
- autocad_electrical
- autocad_mechanical
- autocad_map_3d
- advance_steel
- civil_3d
CWE
CWE-122
Heap-based Buffer Overflow
