This vulnerability (CVE-2025-5038) is a classic buffer overflow (CWE-120) in Autodesk Shared Components 1.6.2.11. When a specially crafted X_T file is parsed, the lack of input size validation causes memory corruption, enabling arbitrary code execution. The CVSS 3.1 score is 7.8 (high), reflecting local attack vector with low complexity, no privileges required, but user interaction needed. Confidentiality, integrity, and availability impacts are all rated high. No known exploits are reported in the wild, and no patch or vendor advisory is currently provided.

Exploitation can lead to arbitrary code execution in the context of the current user process, potentially compromising confidentiality, integrity, and availability of the affected system. The attack requires local access and user interaction, limiting remote exploitation. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid opening untrusted X_T files with Autodesk Shared Components version 1.6.2.11. Monitor Autodesk communications for updates and apply patches promptly once available.