CVE-2025-8892 HIGH

CVE-2025-8892: PRT File Parsing Memory Corruption Vulnerability

Vendor Autodesk

Product Shared Components

Weakness CWE-120

Published September 22, 2025

Last update May 8, 2026

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Key dates

02Disclosure timeline

September 22, 2025 CVE published

May 8, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-8892 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/120.html

Related vulnerabilities

04Related CVE

CVE-2024-52064 Potential stack buffer write overflow in Connext applications while parsing malicious license file CVE-2025-3725 PCMan FTP Server MIC Command buffer overflow CVE-2023-49700 Buffer Copy Without Checking size of input in IMS CVE-2023-42800 Buffer overflow due to use of `strcpy` in `performRtspHandshake` CVE-2022-20895 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities