Autodesk Shared Components CVE-2025-10888

Exploitation requires an attacker to deliver a specially crafted MODEL file AND a victim to open/parse that file in an affected Autodesk product that uses the vulnerable shared components (the advisory ADSK-SA-2025-0024 should be consulted for the exact product list). The vulnerability is not remotely triggerable over a network and cannot self-propagate: the mandatory user interaction (UI:R) of opening the malicious file, combined with the local attack vector (AV:L), is the primary limiting factor. There is no privilege prerequisite on the target system, but code executes only in the context of the current user running the application, not with elevated privileges.

This is a genuine but conditional priority. The CVSS 3.1 base score of 7.8 (High) is driven by full CIA impact (C:H/I:H/A:H) reflecting potential arbitrary code execution, but the vector tempers real-world urgency: AV:L means there is no network attack surface, and UI:R means a user must actively open a maliciously crafted MODEL file for exploitation to occur. PR:N (unauthenticated) is somewhat misleading here - no credentials are needed, but the attacker instead relies on social engineering to deliver the file. No EPSS score, KEV listing, or POC indicator was supplied in the input, so there is no signal of active exploitation or published exploit code; this is consistent with a vendor-self-reported (Autodesk PSIRT) memory-corruption bug rather than a mass-exploited flaw. SSVC-style reading: exploitation status appears to be 'none', automatability is low (requires user interaction, not autonomously scalable), and technical impact is total. Net: a credible local/client-side code-execution risk warranting prompt patching in Autodesk-heavy environments, but not an emergency on par with a remotely exploitable, actively-exploited bug. No conflicting signals were detected between the CVSS vector and the description - both consistently describe local file-parsing exploitation.

An attacker crafts a malicious MODEL file and delivers it to a victim via email, a shared project repository, or a download, relying on the fact that CAD/design users routinely open third-party model files. When the victim opens the file in a vulnerable Autodesk product, the parser performs an out-of-bounds write that corrupts memory, allowing the attacker to crash the application, corrupt data, or execute code in the context of the current user. No public exploit code is identified in the provided data.