CVE-2025-8894
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-09-16
Last updated on: 2025-09-19
Assigner: Autodesk
Description
Description
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| autodesk | autocad_plant_3d | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_plant_3d | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_plant_3d | From 2026 (inc) to 2026.1 (exc) |
| autodesk | advance_steel | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | advance_steel | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | advance_steel | From 2026 (inc) to 2026.1 (exc) |
| autodesk | civil_3d | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | civil_3d | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | civil_3d | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_lt | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_lt | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_lt | From 2026 (inc) to 2026.1 (exc) |
| autodesk | revit | From 2025 (inc) to 2025.4.3 (exc) |
| autodesk | revit | From 2026 (inc) to 2026.3 (exc) |
| autodesk | autocad | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_architecture | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_architecture | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_architecture | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_electrical | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_electrical | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_electrical | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_mechanical | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_mechanical | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_mechanical | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_mep | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_mep | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_mep | From 2026 (inc) to 2026.1 (exc) |
| autodesk | autocad_map_3d | From 2024 (inc) to 2024.1.8 (exc) |
| autodesk | autocad_map_3d | From 2025 (inc) to 2025.1.3 (exc) |
| autodesk | autocad_map_3d | From 2026 (inc) to 2026.1 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-122 | A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). |
