CVE Catalog

CVE-2025-8894

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

6th percentile - higher than 6% of all known CVEs

Summary

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Risk Assessment

Opening a malicious PDF in a vulnerable Autodesk product may lead to arbitrary code execution or data disclosure within the application context.

Recommendation

Update Autodesk products to a patched version and exercise caution when opening PDF files from untrusted sources.

Other vulnerabilities in Autodesk

See all
Original NVD description (English source)

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS