CVE-2025-10899

{"id": "CVE-2025-10899", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10899", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-17T04:55:24.893624Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@autodesk.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@autodesk.com", "affectedData": [{"cpes": ["cpe:2.3:a:autodesk:shared_components:1.8.0.7:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Shared Components", "versions": [{"status": "affected", "version": "1.8.0.7", "lessThan": "1.9.0.7", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-16T00:16:01.147", "references": [{"url": "https://www.autodesk.com/products/autodesk-access/overview", "tags": ["Product"], "source": "psirt@autodesk.com"}, {"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0024", "tags": ["Vendor Advisory"], "source": "psirt@autodesk.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@autodesk.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Un archivo MODEL manipulado maliciosamente, cuando es analizado por ciertos productos de Autodesk, puede provocar una vulnerabilidad de escritura fuera de l\u00edmites. Un actor malicioso puede aprovechar esta vulnerabilidad para provocar un fallo, causar corrupci\u00f3n de datos o ejecutar c\u00f3digo arbitrario en el contexto del proceso actual."}], "lastModified": "2026-10-07T19:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:shared_components:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28E85F6F-29B5-466C-85AD-79FC25372EFD", "versionEndExcluding": "2026.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B938D507-D95A-4EAD-86AB-9B52A3682414"}, {"criteria": "cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "68738B5A-B918-4CA3-BD13-4040B3219AFC"}, {"criteria": "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8890EECB-7AB5-41A3-8E77-314183BC3AB3"}, {"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CE935915-6926-474F-B5A4-7E77EF7426DD"}, {"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BEC23105-1362-4BFE-9C93-F0AAA5BAF2B0"}, {"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2DB79016-0BB6-4E8A-8AE3-5AB39A252DED"}, {"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4A159D88-990D-41D7-B6B0-D97B38241860"}, {"criteria": "cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "046ADE16-4275-4BEF-9A71-480E709383F7"}, {"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EEB9FCDC-6717-44EB-AA55-983A771E2460"}, {"criteria": "cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3383C40E-DD43-4146-9B58-C44585E40985"}, {"criteria": "cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1B01CD79-B993-47BB-B775-C10422FB956B"}, {"criteria": "cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F7393B89-15A9-4709-9FF3-DA1C88770594"}, {"criteria": "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "58A56B67-B754-4525-995A-F70CAA6B5AAB"}, {"criteria": "cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DF3C0C68-F0D7-4737-8D37-D99F128DAB47"}, {"criteria": "cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "08F81FC1-1B7C-40AF-88DB-B62F24CFA21C"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@autodesk.com"}