Skip to content
fr Sign in
7.8 High

CVE-2025-10881 A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow…

Description

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected products and versions

Product Affected versions Fixed in
Shared Components 1.8 1.8.0 → < 1.9.0 1.9.0
AutoCAD 2025.0 2025.0.0 → < 2025.1.4 2025.1.4
AutoCAD 2024.0 2024.0.0 → < 2024.1.9 2024.1.9

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Shared Components

The 33 CVEs of Shared Components →
CVE-2026-14255 A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion… 5.5 Medium CVE-2026-0875 A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write… 7.8 High CVE-2026-0874 A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write… 7.8 High CVE-2025-10900 AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write… 7.8 High
Track this CVE