A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/products/autodesk-access/overview | Product |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0018 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
Configuration 10 (hide)
|
Configuration 11 (hide)
|
History
No history.
Information
Published : 2025-09-16 15:15
Updated : 2025-09-19 13:51
NVD link : CVE-2025-8894
Mitre link : CVE-2025-8894
CVE.ORG link : CVE-2025-8894
JSON object : View
Products Affected
autodesk
- autocad_electrical
- autocad_map_3d
- autocad
- autocad_mep
- autocad_mechanical
- autocad_plant_3d
- autocad_architecture
- advance_steel
- revit
- autocad_lt
- civil_3d
CWE
CWE-122
Heap-based Buffer Overflow
