CVE-2025-10882

{"id": "CVE-2025-10882", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10882", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-17T04:55:39.499357Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@autodesk.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@autodesk.com", "affectedData": [{"cpes": ["cpe:2.3:a:autodesk:shared_components:1.8.0.7:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Shared Components", "versions": [{"status": "affected", "version": "1.8.0.7", "lessThan": "1.9.0.7", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD", "versions": [{"status": "affected", "version": "2024", "lessThan": "2024.1.9", "versionType": "custom"}, {"status": "affected", "version": "2025", "lessThan": "2025.1.4", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-16T00:15:59.993", "references": [{"url": "https://www.autodesk.com/products/autodesk-access/overview", "tags": ["Product"], "source": "psirt@autodesk.com"}, {"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0024", "tags": ["Vendor Advisory"], "source": "psirt@autodesk.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@autodesk.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "A maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Un archivo X_T manipulado maliciosamente, cuando es procesado por ciertos productos de Autodesk, puede forzar una vulnerabilidad de escritura fuera de l\u00edmites. Un actor malicioso puede aprovechar esta vulnerabilidad para provocar un bloqueo, causar corrupci\u00f3n de datos o ejecutar c\u00f3digo arbitrario en el contexto del proceso actual."}], "lastModified": "2026-10-19T13:16:52.073", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:shared_components:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28E85F6F-29B5-466C-85AD-79FC25372EFD", "versionEndExcluding": "2026.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B938D507-D95A-4EAD-86AB-9B52A3682414"}, {"criteria": "cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "68738B5A-B918-4CA3-BD13-4040B3219AFC"}, {"criteria": "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8890EECB-7AB5-41A3-8E77-314183BC3AB3"}, {"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CE935915-6926-474F-B5A4-7E77EF7426DD"}, {"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BEC23105-1362-4BFE-9C93-F0AAA5BAF2B0"}, {"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2DB79016-0BB6-4E8A-8AE3-5AB39A252DED"}, {"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4A159D88-990D-41D7-B6B0-D97B38241860"}, {"criteria": "cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "046ADE16-4275-4BEF-9A71-480E709383F7"}, {"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EEB9FCDC-6717-44EB-AA55-983A771E2460"}, {"criteria": "cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3383C40E-DD43-4146-9B58-C44585E40985"}, {"criteria": "cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1B01CD79-B993-47BB-B775-C10422FB956B"}, {"criteria": "cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F7393B89-15A9-4709-9FF3-DA1C88770594"}, {"criteria": "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "58A56B67-B754-4525-995A-F70CAA6B5AAB"}, {"criteria": "cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DF3C0C68-F0D7-4737-8D37-D99F128DAB47"}, {"criteria": "cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "08F81FC1-1B7C-40AF-88DB-B62F24CFA21C"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@autodesk.com"}