A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/products/autodesk-access/overview | Product |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0019 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
19 Nov 2025, 14:45
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Autodesk revit Lt
Autodesk civil 3d Autodesk advance Steel Autodesk inventor Autodesk 3ds Max Autodesk autocad Autodesk autocad Mep Autodesk infraworks Autodesk Autodesk autocad Mechanical Autodesk autocad Plant 3d Autodesk autocad Architecture Autodesk shared Components Autodesk vault Autodesk autocad Map 3d Autodesk autocad Electrical Autodesk revit |
|
| References | () https://www.autodesk.com/products/autodesk-access/overview - Product | |
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0019 - Vendor Advisory | |
| CPE | cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:shared_components:2026.3:*:*:*:*:*:*:* cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:* |
|
| CWE | CWE-787 |
07 Nov 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-07 18:15
Updated : 2025-11-19 14:45
NVD link : CVE-2025-9458
Mitre link : CVE-2025-9458
CVE.ORG link : CVE-2025-9458
JSON object : View
Products Affected
autodesk
- infraworks
- inventor
- autocad_mep
- autocad
- autocad_architecture
- revit
- revit_lt
- autocad_plant_3d
- vault
- shared_components
- autocad_electrical
- autocad_map_3d
- autocad_mechanical
- advance_steel
- civil_3d
- 3ds_max