CVE Catalog

CVE-2025-10883

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.28%

19th percentile - higher than 19% of all known CVEs

Summary

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Risk Assessment

The risk of system crash, sensitive data leakage, or arbitrary code execution, which could lead to confidentiality and integrity compromise.

Recommendation

It is recommended to avoid opening untrusted CATPRODUCT files and to update Autodesk products to the latest versions with security patches.

Other vulnerabilities in Autodesk

See all
Original NVD description (English source)

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS