CVE-2025-10882
Full vulnerability record from the local CVENow database.
Description
A maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2025-12-16 00:15:59.993000
Last modified
2026-10-19 13:16:52.073000
View original CVE JSON
{
"id": "CVE-2025-10882",
"sourceIdentifier": "[email protected]",
"published": "2025-12-16T00:15:59.993",
"lastModified": "2026-10-19T13:16:52.073",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."
},
{
"lang": "es",
"value": "Un archivo X_T manipulado maliciosamente, cuando es procesado por ciertos productos de Autodesk, puede forzar una vulnerabilidad de escritura fuera de límites. Un actor malicioso puede aprovechar esta vulnerabilidad para provocar un bloqueo, causar corrupción de datos o ejecutar código arbitrario en el contexto del proceso actual."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Autodesk",
"product": "Shared Components",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:shared_components:1.8.0.7:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "1.8.0.7",
"lessThan": "1.9.0.7",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Autodesk",
"product": "AutoCAD",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*",
"cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2024",
"lessThan": "2024.1.9",
"versionType": "custom",
"status": "affected"
},
{
"version": "2025",
"lessThan": "2025.1.4",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-12-17T04:55:39.499357Z",
"id": "CVE-2025-10882",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:autodesk:shared_components:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2026.5",
"matchCriteriaId": "28E85F6F-29B5-466C-85AD-79FC25372EFD"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "B938D507-D95A-4EAD-86AB-9B52A3682414"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "68738B5A-B918-4CA3-BD13-4040B3219AFC"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "8890EECB-7AB5-41A3-8E77-314183BC3AB3"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "CE935915-6926-474F-B5A4-7E77EF7426DD"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "BEC23105-1362-4BFE-9C93-F0AAA5BAF2B0"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "2DB79016-0BB6-4E8A-8AE3-5AB39A252DED"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "4A159D88-990D-41D7-B6B0-D97B38241860"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "046ADE16-4275-4BEF-9A71-480E709383F7"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "EEB9FCDC-6717-44EB-AA55-983A771E2460"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "3383C40E-DD43-4146-9B58-C44585E40985"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:*",
"matchCriteriaId": "1B01CD79-B993-47BB-B775-C10422FB956B"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "F7393B89-15A9-4709-9FF3-DA1C88770594"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "58A56B67-B754-4525-995A-F70CAA6B5AAB"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "DF3C0C68-F0D7-4737-8D37-D99F128DAB47"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:*",
"matchCriteriaId": "08F81FC1-1B7C-40AF-88DB-B62F24CFA21C"
}
]
}
]
}
],
"references": [
{
"url": "https://www.autodesk.com/products/autodesk-access/overview",
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0024",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}