{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-6636", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "state": "PUBLISHED", "assignerShortName": "autodesk", "dateReserved": "2025-06-25T13:44:27.794Z", "datePublished": "2025-07-29T17:54:02.053Z", "dateUpdated": "2025-08-19T13:22:14.824Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:autodesk:shared_components:2026.3:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Shared Components", "vendor": "Autodesk", "versions": [{"lessThan": "2026.3", "status": "affected", "version": "2026.2", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.<br>"}], "value": "A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process."}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-416", "description": "CWE-416 Use After Free", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2025-08-19T13:22:14.824Z"}, "references": [{"tags": ["patch"], "url": "https://www.autodesk.com/products/autodesk-access/overview"}, {"tags": ["vendor-advisory"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015"}], "source": {"discovery": "EXTERNAL"}, "title": "PRT File Parsing Use-After-Free Vulnerability", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-07-29T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-6636"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-30T03:55:54.668Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-6636", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-07-29T18:30:13.942533Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-29T18:30:22.339Z"}}], "cna": {"title": "PRT File Parsing Use-After-Free Vulnerability", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:autodesk:shared_components:2026.3:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Shared Components", "versions": [{"status": "affected", "version": "2026.2", "lessThan": "2026.3", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.autodesk.com/products/autodesk-access/overview", "tags": ["patch"]}, {"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.", "supportingMedia": [{"type": "text/html", "value": "A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2025-08-19T13:22:14.824Z"}}}, "cveMetadata": {"cveId": "CVE-2025-6636", "state": "PUBLISHED", "dateUpdated": "2025-08-19T13:22:14.824Z", "dateReserved": "2025-06-25T13:44:27.794Z", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "datePublished": "2025-07-29T17:54:02.053Z", "assignerShortName": "autodesk"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:shared_components:2026.2:*:*:*:*:*:*:*", "matchCriteriaId": "F619380D-7F2A-453B-BC9C-EBF82B7628A7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:*", "matchCriteriaId": "B938D507-D95A-4EAD-86AB-9B52A3682414", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*", "matchCriteriaId": "68738B5A-B918-4CA3-BD13-4040B3219AFC", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*", "matchCriteriaId": "8890EECB-7AB5-41A3-8E77-314183BC3AB3", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*", "matchCriteriaId": "CE935915-6926-474F-B5A4-7E77EF7426DD", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*", "matchCriteriaId": "BEC23105-1362-4BFE-9C93-F0AAA5BAF2B0", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*", "matchCriteriaId": "2DB79016-0BB6-4E8A-8AE3-5AB39A252DED", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*", "matchCriteriaId": "4A159D88-990D-41D7-B6B0-D97B38241860", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*", "matchCriteriaId": "046ADE16-4275-4BEF-9A71-480E709383F7", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*", "matchCriteriaId": "EEB9FCDC-6717-44EB-AA55-983A771E2460", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*", "matchCriteriaId": "3383C40E-DD43-4146-9B58-C44585E40985", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:*", "matchCriteriaId": "1B01CD79-B993-47BB-B775-C10422FB956B", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:*", "matchCriteriaId": "F7393B89-15A9-4709-9FF3-DA1C88770594", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "matchCriteriaId": "58A56B67-B754-4525-995A-F70CAA6B5AAB", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:*", "matchCriteriaId": "DF3C0C68-F0D7-4737-8D37-D99F128DAB47", "vulnerable": false}, {"criteria": "cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:*", "matchCriteriaId": "08F81FC1-1B7C-40AF-88DB-B62F24CFA21C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Un archivo PRT manipulado con fines maliciosos, al analizarse mediante ciertos productos de Autodesk, puede generar una vulnerabilidad de uso despu\u00e9s de la liberaci\u00f3n. Un agente malicioso puede aprovechar esta vulnerabilidad para provocar un bloqueo, leer datos confidenciales o ejecutar c\u00f3digo arbitrario en el contexto del proceso actual."}], "id": "CVE-2025-6636", "lastModified": "2025-08-19T14:15:42.533", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "psirt@autodesk.com", "type": "Secondary"}]}, "published": "2025-07-29T18:15:32.350", "references": [{"source": "psirt@autodesk.com", "url": "https://www.autodesk.com/products/autodesk-access/overview"}, {"source": "psirt@autodesk.com", "tags": ["Vendor Advisory"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015"}], "sourceIdentifier": "psirt@autodesk.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "psirt@autodesk.com", "type": "Secondary"}]}

{}