A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/products/autodesk-access/overview | Product |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0019 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
25 Sep 2025, 18:24
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Autodesk autocad Mep
Autodesk autocad Mechanical Autodesk civil 3d Autodesk autocad Map 3d Autodesk vault Autodesk autocad Autodesk Autodesk inventor Autodesk revit Lt Autodesk infraworks Autodesk revit Autodesk 3ds Max Autodesk advance Steel Autodesk autocad Electrical Autodesk shared Components Autodesk autocad Architecture Autodesk autocad Plant 3d |
|
| CPE | cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:* cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:* cpe:2.3:a:autodesk:shared_components:2026.3:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:* |
|
| References | () https://www.autodesk.com/products/autodesk-access/overview - Product | |
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0019 - Vendor Advisory |
22 Sep 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-22 19:16
Updated : 2025-09-25 18:24
NVD link : CVE-2025-8892
Mitre link : CVE-2025-8892
CVE.ORG link : CVE-2025-8892
JSON object : View
Products Affected
autodesk
- inventor
- autocad
- autocad_mep
- autocad_electrical
- autocad_mechanical
- revit_lt
- infraworks
- autocad_architecture
- autocad_map_3d
- autocad_plant_3d
- advance_steel
- shared_components
- revit
- 3ds_max
- vault
- civil_3d
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')