CVE-2025-10889
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Risk Assessment
Risk of system or application compromise, potentially leading to data confidentiality and integrity breaches.
Recommendation
Update Autodesk products to the latest versions and avoid opening CATPART files from untrusted sources.
Other vulnerabilities in Autodesk products
See all- CVE-2026-14255Medium
A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service. Exploitation requires a user to open a specially crafted IFC file.
- CVE-2026-7406High
Untrusted Pointer Dereference vulnerability when parsing a malicious BMP file in certain Autodesk products. Could allow arbitrary code execution.
Original NVD description (English source)
A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS