High severity7.8NVD Advisory· Published Dec 16, 2025· Updated Jun 17, 2026
CVE-2025-9455
CVE-2025-9455
Description
A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Affected products
3cpe:2.3:a:autodesk:shared_components:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:shared_components:*:*:*:*:*:*:*:*range: <2026.5
- cpe:2.3:a:autodesk:shared_components:2026.5:*:*:*:*:*:*:*range: 2026.0
Patches
Vulnerability mechanics
References
2- www.autodesk.com/trust/security-advisories/adsk-sa-2025-0024nvdVendor Advisory
- www.autodesk.com/products/autodesk-access/overviewnvdProduct
News mentions
0No linked articles in our index yet.