A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
References
Configurations
Configuration 1 (hide)
AND |
|
History
19 Aug 2025, 14:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
04 Aug 2025, 14:09
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015 - Vendor Advisory | |
First Time |
Autodesk autocad Mechanical
Autodesk advance Steel Autodesk autocad Electrical Autodesk autocad Architecture Autodesk 3ds Max Autodesk vault Autodesk autocad Mep Autodesk Autodesk revit Autodesk infraworks Autodesk inventor Autodesk civil 3d Autodesk shared Components Autodesk revit Lt Autodesk autocad Plant 3d Autodesk autocad Map 3d Autodesk autocad |
|
CPE | cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:* cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:shared_components:2026.2:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:* |
31 Jul 2025, 18:42
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
29 Jul 2025, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-07-29 18:15
Updated : 2025-08-19 14:15
NVD link : CVE-2025-6637
Mitre link : CVE-2025-6637
CVE.ORG link : CVE-2025-6637
JSON object : View
Products Affected
autodesk
- advance_steel
- autocad
- autocad_plant_3d
- autocad_mechanical
- autocad_mep
- infraworks
- inventor
- revit
- vault
- revit_lt
- autocad_architecture
- shared_components
- autocad_map_3d
- 3ds_max
- civil_3d
- autocad_electrical
CWE
CWE-787
Out-of-bounds Write