CVE-2025-10886: MODEL File Parsing Memory Corruption Vulnerability
Published Dec 15, 2025
·Updated
A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected Software
17 affected components
Autodesk Autodesk Products
All of the following
Autodesk Shared Components<2026.5
Any of the following
Autodesk 3ds Max=2026
Autodesk Advance Steel=2026
Autodesk AutoCAD=2026
Autodesk AutoCAD Architecture=2026
Autodesk AutoCAD Electrical=2026
Autodesk AutoCAD Map 3D=2026
Autodesk AutoCAD Mechanical=2026
Autodesk AutoCAD MEP=2026
Autodesk AutoCAD Plant 3D=2026
Autodesk Civil 3D=2026
Autodesk InfraWorks=2026
Autodesk Inventor=2026
Autodesk Revit=2026
Autodesk Revit Lt=2026
Autodesk Vault=2026
Event History
Dec 15, 2025
CVE Published
via MITRE·11:42 PM
Data Sourced
via MITRE·11:42 PM
DescriptionSeverityWeakness
Dec 16, 2025
Data Sourced
via NVD·12:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-10886?
CVE-2025-10886 is classified as a critical memory corruption vulnerability.
2
How do I fix CVE-2025-10886?
To fix CVE-2025-10886, ensure that you update your Autodesk products to the latest patched version.
3
What are the consequences of exploiting CVE-2025-10886?
Exploiting CVE-2025-10886 can allow a malicious actor to execute arbitrary code within the context of the affected Autodesk process.
4
What is the attack vector for CVE-2025-10886?
The attack vector for CVE-2025-10886 involves parsing a maliciously crafted MODEL file in vulnerable Autodesk products.
5
Which Autodesk products are affected by CVE-2025-10886?
CVE-2025-10886 affects various Autodesk products that process MODEL files.