This vulnerability (CVE-2025-10884) involves an out-of-bounds write (CWE-787) in Autodesk Shared Components version 1.8.0.7. When a specially crafted CATPART file is parsed by certain Autodesk products using this component, it can cause memory corruption. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. Exploitation requires local access with low complexity and user interaction. The vulnerability could allow an attacker to crash the application, corrupt data, or execute arbitrary code under the current process privileges.

Exploitation of this vulnerability can lead to a crash of the affected Autodesk application, corruption of data processed by the application, or execution of arbitrary code with the privileges of the current user. This can compromise system integrity and confidentiality. The attack vector is local with user interaction required, limiting remote exploitation but still posing a significant risk to affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is currently available. Until a fix is released, users should exercise caution when opening CATPART files from untrusted sources and consider restricting access to the affected Autodesk Shared Components version 1.8.0.7. Monitor Autodesk's official channels for updates and apply patches promptly once available.