This vulnerability (CVE-2025-10889) is a classic buffer overflow (CWE-120) in Autodesk Shared Components 1.8.0.7. It is triggered by processing a specially crafted CATPART file, causing memory corruption that can lead to arbitrary code execution. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The attack vector is local, with low attack complexity and no privileges required, but user interaction is necessary. No known exploits are reported in the wild, and no patch or vendor advisory detailing remediation is currently available.

Successful exploitation can result in arbitrary code execution with the privileges of the current user running the Autodesk Shared Components process. This can compromise confidentiality, integrity, and availability of the affected system. The vulnerability requires local access and user interaction, limiting remote exploitation but still posing a significant risk to users who open malicious CATPART files.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted CATPART files and limit local access to trusted users only. Monitor Autodesk's official channels for updates and apply patches promptly once available.