CVE-2025-10881
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. An attacker can leverage this to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Risk Assessment
The vulnerability may lead to application crashes, leakage of sensitive data, or arbitrary code execution in the process context. The risk is high if users open untrusted CATPRODUCT files.
Recommendation
Update Autodesk products to the latest version containing the fix. Avoid opening CATPRODUCT files from untrusted sources.
Other vulnerabilities in Autodesk
See all- CVE-2026-8325High
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. An attacker may leverage this to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
- CVE-2026-7405Medium
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service.
- CVE-2026-1289High
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. An attacker can leverage this to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process.
- CVE-2026-11803High
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. An attacker can leverage this to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
- CVE-2025-10898High
A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. An attacker may leverage this to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Original NVD description (English source)
A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.