Memory Corruption Vulnerability in Autodesk Products
CVE-2025-10886

7.8HIGH

Key Information:

Vendor

Autodesk
Status
Shared Components
Vendor
CVE Published:
15 December 2025

What is CVE-2025-10886?

A crafted MODEL file processed by specific Autodesk software can lead to memory corruption issues. This flaw enables a malicious actor to execute arbitrary code within the affected application's context, posing significant security risks. It is crucial for users of Autodesk products to apply the latest patches to mitigate this vulnerability.

Affected Version(s)

Shared Components 2026.0 < 2026.5

References

https://www.autodesk.com/products/autodesk-access/overview
patch
https://www.autodesk.com/trust/security-advisories/adsk-s...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.