This vulnerability (CVE-2025-6631) is an out-of-bounds write (CWE-787) in Autodesk Shared Components version 1.6.2.11. It occurs when a specially crafted PRT file is parsed by certain Autodesk products, allowing a malicious actor to write outside the intended memory bounds. This can cause crashes, data corruption, or enable arbitrary code execution under the privileges of the current process. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability, with attack vector local, low attack complexity, no privileges required, and user interaction needed.

Successful exploitation can result in a crash of the affected application, corruption of data, or execution of arbitrary code with the same privileges as the user running the Autodesk software. This can compromise system integrity and confidentiality. However, exploitation requires local access and user interaction, limiting remote exploitation potential. No known active exploits have been reported.

No official patch or remediation is currently available for this vulnerability. Patch status is not yet confirmed — check the Autodesk vendor advisory for current remediation guidance. Until a fix is released, users should exercise caution when opening PRT files from untrusted sources and limit local access to trusted users only.