A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
References
Link | Resource |
---|---|
https://www.autodesk.com/products/autodesk-access/overview | Product |
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0018 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
Configuration 10 (hide)
|
Configuration 11 (hide)
|
History
19 Sep 2025, 13:52
Type | Values Removed | Values Added |
---|---|---|
First Time |
Autodesk autocad Mechanical
Autodesk autocad Lt Autodesk revit Autodesk advance Steel Autodesk autocad Electrical Autodesk civil 3d Autodesk autocad Architecture Autodesk autocad Plant 3d Autodesk autocad Mep Autodesk Autodesk autocad Map 3d Autodesk autocad |
|
CPE | cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* |
|
References | () https://www.autodesk.com/products/autodesk-access/overview - Product | |
References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0018 - Vendor Advisory |
16 Sep 2025, 15:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-09-16 15:15
Updated : 2025-09-19 13:52
NVD link : CVE-2025-8893
Mitre link : CVE-2025-8893
CVE.ORG link : CVE-2025-8893
JSON object : View
Products Affected
autodesk
- autocad
- advance_steel
- autocad_lt
- autocad_plant_3d
- autocad_mechanical
- autocad_mep
- autocad_architecture
- revit
- civil_3d
- autocad_map_3d
- autocad_electrical
CWE
CWE-787
Out-of-bounds Write