A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/products/autodesk-access/overview | Product |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0024 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
22 Jan 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
19 Dec 2025, 14:38
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| CPE | cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:shared_components:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:* |
|
| References | () https://www.autodesk.com/products/autodesk-access/overview - Product | |
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0024 - Vendor Advisory | |
| First Time |
Autodesk revit Lt
Autodesk 3ds Max Autodesk Autodesk autocad Mechanical Autodesk revit Autodesk advance Steel Autodesk inventor Autodesk autocad Architecture Autodesk infraworks Autodesk autocad Plant 3d Autodesk autocad Autodesk autocad Mep Autodesk autocad Electrical Autodesk autocad Map 3d Autodesk civil 3d Autodesk shared Components Autodesk vault |
16 Dec 2025, 00:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-16 00:16
Updated : 2026-01-22 15:16
NVD link : CVE-2025-9456
Mitre link : CVE-2025-9456
CVE.ORG link : CVE-2025-9456
JSON object : View
Products Affected
autodesk
- inventor
- autocad_plant_3d
- 3ds_max
- revit_lt
- advance_steel
- civil_3d
- revit
- infraworks
- autocad
- autocad_architecture
- autocad_electrical
- autocad_map_3d
- autocad_mep
- shared_components
- autocad_mechanical
- vault
CWE
CWE-787
Out-of-bounds Write