A maliciously crafted 3DM file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
04 Aug 2025, 13:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Autodesk advance Steel
Autodesk autocad Mep Autodesk infraworks Autodesk autocad Plant 3d Autodesk vault Autodesk autocad Electrical Autodesk civil 3d Autodesk autocad Architecture Autodesk inventor Autodesk shared Components Autodesk 3ds Max Autodesk autocad Map 3d Autodesk autocad Mechanical Autodesk revit Autodesk Autodesk revit Lt Autodesk autocad |
|
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015 - Vendor Advisory | |
| CPE | cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:shared_components:2026.2:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:* cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:* |
31 Jul 2025, 18:42
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
29 Jul 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-29 18:15
Updated : 2025-08-04 13:49
NVD link : CVE-2025-7675
Mitre link : CVE-2025-7675
CVE.ORG link : CVE-2025-7675
JSON object : View
Products Affected
autodesk
- vault
- infraworks
- civil_3d
- revit
- autocad_mep
- autocad_mechanical
- revit_lt
- autocad_electrical
- inventor
- shared_components
- autocad_architecture
- advance_steel
- autocad_map_3d
- autocad_plant_3d
- 3ds_max
- autocad
CWE
CWE-787
Out-of-bounds Write