CVE-2025-8893
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-09-16
Last updated on: 2025-09-19
Assigner: Autodesk
Description
Description
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| autodesk | revit | From 2025 (inc) to 2025.4.3 (exc) |
| autodesk | revit | From 2026 (inc) to 2026.3 (exc) |
| autodesk | autocad | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_architecture | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_architecture | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_architecture | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_electrical | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_electrical | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_electrical | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_mechanical | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_mechanical | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_mechanical | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_plant_3d | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_plant_3d | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_plant_3d | From 2026 (inc) to 2026.1 (exc) |
| autodesk | advance_steel | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | advance_steel | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | advance_steel | From 2026 (inc) to 2026.1 (exc) |
| autodesk | civil_3d | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | civil_3d | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | civil_3d | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_lt | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_lt | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_lt | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_mep | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_mep | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_mep | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_map_3d | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_map_3d | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_map_3d | From 2026 (inc) to 2026.1 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
