CVE-2025-9452: SLDPRT File Parsing Memory Corruption Vulnerability
Published Dec 15, 2025
·Updated
A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected Software
17 affected components
Autodesk Autodesk Products
All of the following
Autodesk Shared Components<2026.5
Any of the following
Autodesk 3ds Max=2026
Autodesk Advance Steel=2026
Autodesk AutoCAD=2026
Autodesk AutoCAD Architecture=2026
Autodesk AutoCAD Electrical=2026
Autodesk AutoCAD Map 3D=2026
Autodesk AutoCAD Mechanical=2026
Autodesk AutoCAD MEP=2026
Autodesk AutoCAD Plant 3D=2026
Autodesk Civil 3D=2026
Autodesk InfraWorks=2026
Autodesk Inventor=2026
Autodesk Revit=2026
Autodesk Revit Lt=2026
Autodesk Vault=2026
Event History
Dec 15, 2025
CVE Published
via MITRE·11:32 PM
Data Sourced
via MITRE·11:32 PM
DescriptionSeverityWeakness
Dec 16, 2025
Data Sourced
via NVD·12:16 AM
DescriptionSeverityWeaknessAffected Software
Sep 25, 57972
Event
via FIRST·02:47 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-9452?
CVE-2025-9452 is considered a critical vulnerability due to its potential for memory corruption and arbitrary code execution.
2
How do I fix CVE-2025-9452?
To mitigate CVE-2025-9452, apply the latest security updates from Autodesk for the affected products.
3
What products are affected by CVE-2025-9452?
CVE-2025-9452 affects several Autodesk products that process SLDPRT files.
4
Can CVE-2025-9452 lead to remote code execution?
Yes, CVE-2025-9452 can allow a malicious actor to execute arbitrary code through crafted SLDPRT files.
5
What type of file is associated with CVE-2025-9452?
CVE-2025-9452 is associated with maliciously crafted SLDPRT files.