CVE-2025-10898

🗓️ 15 Dec 2025 23:44:26Reported by autodeskType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 5 Views

CVE-2025-10898: Malicious MODEL file may trigger out-of-bounds write in Autodesk products, causing crashes or code execution.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2025-10898	15 Dec 202523:44	–	attackerkb
Tenable Nessus	Autodesk Shared Components < 2026.5 Multiple Vulnerabilities (adsk-sa-2025-0024)	8 Jan 202600:00	–	nessus
Circl	CVE-2025-10898	16 Dec 202513:42	–	circl
CNNVD	Autodesk Shared Components 安全漏洞	16 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-10898 MODEL File Parsing Out-of-Bounds Write Vulnerability	15 Dec 202523:44	–	cvelist
EUVD	EUVD-2025-203477	16 Dec 202500:30	–	euvd
NVD	CVE-2025-10898	16 Dec 202500:16	–	nvd
OSV	CVE-2025-10898	16 Dec 202500:16	–	osv
Positive Technologies	PT-2025-51332	15 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-10898	16 Dec 202523:55	–	redhatcve

NVD

Node

autodesk shared_componentsRange<2026.5

AND

autodesk 3ds_maxMatch2026

autodesk advance_steelMatch2026

autodesk autocadMatch2026

autodesk autocad_architectureMatch2026

autodesk autocad_electricalMatch2026

autodesk autocad_map_3dMatch2026

autodesk autocad_mechanicalMatch2026

autodesk autocad_mepMatch2026

autodesk autocad_plant_3dMatch2026

autodesk civil_3dMatch2026

autodesk infraworksMatch2026-

autodesk inventorMatch2026

autodesk revitMatch2026

autodesk revit_ltMatch2026

autodesk vaultMatch2026

[
  {
    "vendor": "Autodesk",
    "product": "Shared Components",
    "versions": [
      {
        "status": "affected",
        "version": "1.8.0.7",
        "lessThan": "1.9.0.7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:a:autodesk:shared_components:1.8.0.7:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2025-0024
autodesk	www.autodesk.com/products/autodesk-access/overview

07 May 2026 19:39Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8

EPSS0.00028

SSVC

CWE-787