CVE-2025-6636

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.autodesk.com/products/autodesk-access/overview
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:autodesk:shared_components:2026.2:*:*:*:*:*:*:*

OR	cpe:2.3:a:autodesk:3ds_max:2026:::::::*
	cpe:2.3:a:autodesk:advance_steel:2026:::::::*
	cpe:2.3:a:autodesk:autocad:2026:::::::*
	cpe:2.3:a:autodesk:autocad_architecture:2026:::::::*
	cpe:2.3:a:autodesk:autocad_electrical:2026:::::::*
	cpe:2.3:a:autodesk:autocad_map_3d:2026:::::::*
	cpe:2.3:a:autodesk:autocad_mechanical:2026:::::::*
	cpe:2.3:a:autodesk:autocad_mep:2026:::::::*
	cpe:2.3:a:autodesk:autocad_plant_3d:2026:::::::*
	cpe:2.3:a:autodesk:civil_3d:2026:::::::*
	cpe:2.3:a:autodesk:infraworks:2026:-::::::
	cpe:2.3:a:autodesk:inventor:2026:::::::*
	cpe:2.3:a:autodesk:revit:2026:::::::*
	cpe:2.3:a:autodesk:revit_lt:2026:::::::*
	cpe:2.3:a:autodesk:vault:2026:::::::*

History

No history.

Information

Published : 2025-07-29 18:15

Updated : 2026-06-17 10:02

NVD link : CVE-2025-6636

Mitre link : CVE-2025-6636

CVE.ORG link : CVE-2025-6636

JSON object : View

Products Affected

autodesk

shared_components
autocad_mechanical
civil_3d
revit
revit_lt
autocad
autocad_electrical
autocad_mep
inventor
vault
autocad_plant_3d
infraworks
autocad_map_3d
3ds_max
advance_steel
autocad_architecture

CWE

CWE-416

Use After Free

{"id": "CVE-2025-6636", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-6636", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-07-30T03:55:55.141092Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@autodesk.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@autodesk.com", "affectedData": [{"cpes": ["cpe:2.3:a:autodesk:shared_components:1.6.2.11:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Shared Components", "versions": [{"status": "affected", "version": "1.6.2.11", "lessThan": "1.7.0.10", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-07-29T18:15:32.350", "references": [{"url": "https://www.autodesk.com/products/autodesk-access/overview", "source": "psirt@autodesk.com"}, {"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015", "tags": ["Vendor Advisory"], "source": "psirt@autodesk.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@autodesk.com", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Un archivo PRT manipulado con fines maliciosos, al analizarse mediante ciertos productos de Autodesk, puede generar una vulnerabilidad de uso despu\u00e9s de la liberaci\u00f3n. Un agente malicioso puede aprovechar esta vulnerabilidad para provocar un bloqueo, leer datos confidenciales o ejecutar c\u00f3digo arbitrario en el contexto del proceso actual."}], "lastModified": "2026-06-17T10:02:17.487", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:shared_components:2026.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F619380D-7F2A-453B-BC9C-EBF82B7628A7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B938D507-D95A-4EAD-86AB-9B52A3682414"}, {"criteria": "cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "68738B5A-B918-4CA3-BD13-4040B3219AFC"}, {"criteria": "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8890EECB-7AB5-41A3-8E77-314183BC3AB3"}, {"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CE935915-6926-474F-B5A4-7E77EF7426DD"}, {"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BEC23105-1362-4BFE-9C93-F0AAA5BAF2B0"}, {"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2DB79016-0BB6-4E8A-8AE3-5AB39A252DED"}, {"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4A159D88-990D-41D7-B6B0-D97B38241860"}, {"criteria": "cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "046ADE16-4275-4BEF-9A71-480E709383F7"}, {"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EEB9FCDC-6717-44EB-AA55-983A771E2460"}, {"criteria": "cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3383C40E-DD43-4146-9B58-C44585E40985"}, {"criteria": "cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1B01CD79-B993-47BB-B775-C10422FB956B"}, {"criteria": "cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F7393B89-15A9-4709-9FF3-DA1C88770594"}, {"criteria": "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "58A56B67-B754-4525-995A-F70CAA6B5AAB"}, {"criteria": "cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DF3C0C68-F0D7-4737-8D37-D99F128DAB47"}, {"criteria": "cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "08F81FC1-1B7C-40AF-88DB-B62F24CFA21C"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@autodesk.com"}