CVE-2025-9455

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Score

CVSS 3.1 7.8 High

Status

Analyzed - psirt@autodesk.com

Published

2025-12-16

Last modified

2026-10-07

Weaknesses

CWE-125

Affected products

• Shared Components (Autodesk)

References

• https://www.autodesk.com/products/autodesk-access/overview
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0024