CVE-2025-6632

CVE-2025-6632 corresponds to a vulnerability in Autodesk 3ds Max where a specially crafted PSD file can trigger an Out-of-Bounds Read in the PSD parsing path. Affected component: Autodesk 3ds Max (PSD file handling). Impact statements from the sources indicate potential crash, exposure of sensiti...

PT-2025-32224 · Autodesk · Autodesk 3Ds Max

Name of the Vulnerable Software and Affected Versions: Autodesk 3ds Max affected versions not specified Description: A maliciously crafted RBG file, when parsed, can trigger an Out-of-Bounds Write issue. Successful exploitation may allow an attacker to cause a crash, corrupt data, or execute...

Autodesk 3ds Max 安全漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max that stems from a specially crafted PSD file that could lead to out-of-bounds reads...

PT-2025-32225 · Autodesk · Autodesk 3Ds Max

Name of the Vulnerable Software and Affected Versions: Autodesk 3ds Max affected versions not specified Description: A maliciously crafted TGA file, when linked or imported into Autodesk 3ds Max, can lead to a memory corruption issue. A malicious actor can potentially exploit this issue to execut...

Autodesk 3ds Max 安全漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max that stems from a specially crafted RBG file that could lead to out-of-bounds writes...

PT-2025-32223 · Autodesk · Autodesk 3Ds Max

Name of the Vulnerable Software and Affected Versions: Autodesk 3ds Max affected versions not specified Description: A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can trigger an Out-of-Bounds Read issue. An attacker can exploit this to cause a crash, potentially...

Autodesk 3ds Max 安全漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max that stems from a specially crafted TGA file that could lead to memory corruption...

Autodesk Navisworks Manage 2026 Untrusted Search Path (adsk-sa-2025-0014)

The version of Autodesk Navisworks Manage installed on the remote host may be affected by a vulnerability as referenced in the adsk-sa-2025-0014 advisory. - A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary...

Autodesk Revit 2026 < 2026.0.2 Untrusted Search Path (adsk-sa-2025-0014)

The version of Autodesk Revit installed on the remote host is 2026 prior to 2026.0.2. It is, therefore, affected by a vulnerability as referenced in the adsk-sa-2025-0014 advisory. - A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead t...

CVE-2025-7675

A maliciously crafted 3DM file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-5043

A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-6637

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-5038

A maliciously crafted XT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2025-7497

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-6631

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-6636

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-6635

A maliciously crafted PRT file, when linked or imported into certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

Vulnerabilities fixed in Autodesk AutoCAD

Autodesk has fixed vulnerabilities in AutoCAD. The vulnerabilities are in the way certain Autodesk products handle specially crafted files. These vulnerabilities can lead to memory corruption, Out-of-Bounds write and read conditions, and Use-After-Free errors. This can result in consequences such...

CVE-2025-6635

A maliciously crafted PRT file, when linked or imported into certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-6637

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...