{"id":"CVE-2025-10898","revision":"f58f3092a15b4420b88d22e38bf7f7d8","records":[{"revision":"f58f3092a15b4420b88d22e38bf7f7d8","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-10898","aliases":[],"title":"Multiple Vulnerabilities in Certain Autodesk Products","description":"A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.","state":0,"publishedAt":"2025-12-15T23:44:26.564+00:00","modifiedAt":"2026-10-19T12:19:44.052+00:00","affected":[{"ecosystem":"Vendor product","name":"Shared Components","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Autodesk\",\n                    \"product\": \"Shared Components\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.8.0.7\",\n                            \"lessThan\": \"1.9.0.7\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\",\n                    \"cpes\": [\n                        \"cpe:2.3:a:autodesk:shared_components:1.8.0.7:*:*:*:*:*:*:*\"\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"AutoCAD","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Autodesk\",\n                    \"product\": \"AutoCAD\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2024\",\n                            \"lessThan\": \"2024.1.9\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2025\",\n                            \"lessThan\": \"2025.1.4\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\",\n                    \"cpes\": [\n                        \"cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://www.autodesk.com/products/autodesk-access/overview","https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0024"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-10898","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-10898","identifiers":["CVE-2025-10898"]},"retained":false,"historicalAffected":[]}],"coverage":[]}