CVE-2025-14593
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A specially crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. An attacker can leverage this to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Risk Assessment
The risk includes potential application crashes, leakage of confidential data, or system compromise in the context of the logged-in user. This could lead to a breach of organizational data integrity and confidentiality.
Recommendation
It is recommended to immediately update Autodesk products to the latest patched versions. Also, avoid opening CATPART files from untrusted sources.
Other vulnerabilities in Autodesk
See all- CVE-2026-7405Medium
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service.
- CVE-2025-9456High
A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
- CVE-2025-9453High
A specially crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. An attacker can leverage this to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
- CVE-2025-9452High
A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
- CVE-2025-10900High
A specially crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. An attacker may leverage this to cause a crash, data corruption, or execute arbitrary code in the context of the current process.
- CVE-2025-10899High
A specially crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. An attacker may leverage this to cause a crash, data corruption, or execute arbitrary code in the context of the current process.
- CVE-2025-10898High
A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
- CVE-2025-10888High
A specially crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. An attacker may leverage this to cause a crash, data corruption, or execute arbitrary code in the context of the current process.
- CVE-2025-10886High
A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
- CVE-2025-10884High
A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Original NVD description (English source)
A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

