Autodesk Shared Components CVE-2025-10886

Exploitation requires a victim to open or parse an attacker-supplied, maliciously crafted MODEL file within an affected Autodesk product that uses the vulnerable shared components - this user interaction (UI:R) and the local attack vector (AV:L) are the primary limiting factors, as there is no network-facing exploitation path. No authentication or elevated privileges are needed by the attacker (PR:N), but code executes only with the privileges of the user who opens the file (scope unchanged), so impact is bounded by that user's context rather than system-wide. Risk is concentrated on workstations that routinely ingest externally sourced model/design files; environments that only open trusted, internally generated files face substantially lower realistic exposure.

This is a moderate-priority, not emergency, vulnerability. The CVSS 3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) is driven by high impact (full code execution in the current process context) but is firmly gated by a LOCAL attack vector and REQUIRED user interaction - the attacker cannot reach the parser remotely and must convince a victim to open a malicious MODEL file. No EPSS score was provided, the CVE is NOT in the CISA KEV catalog, and no public proof-of-concept was supplied in the intelligence, so exploitation status is: no public exploit identified at time of analysis. There is no SSVC decision data in the input. The signals are internally consistent (no conflict between the local/UI-gated vector and the file-parsing description), so there is no network-vs-local discrepancy to flag; the main caveat is simply that real-world risk depends on social-engineering a user into opening attacker-supplied design files, which places this in the classic client-side file-format-parser bug category rather than the auto-exploitable, worm-capable tier. Treat it as a standard patch-cycle item, prioritized higher for workstations that routinely open untrusted CAD/MODEL files.

An attacker emails or shares a maliciously crafted MODEL file (or stages it on a download/collaboration portal) and social-engineers an engineer into opening it in an affected Autodesk product. When the shared-component parser processes the malformed file, a buffer-overflow memory corruption is triggered, allowing arbitrary code execution in the context of the logged-in user. No public exploit code was identified at the time of analysis, so weaponization would require attacker development effort.