This vulnerability (CVE-2025-6635) involves an out-of-bounds read (CWE-125) in Autodesk Shared Components version 1.6.2.11. When a specially crafted PRT file is linked or imported, it can cause the software to read memory outside of intended bounds. This can result in a crash, disclosure of sensitive information, or execution of arbitrary code with the privileges of the current process. The attack vector requires local access (AV:L) and user interaction (UI:R), with no privileges required (PR:N). The vulnerability affects confidentiality, integrity, and availability.

Successful exploitation can cause a crash of the affected Autodesk product, potentially leading to denial of service. More critically, it can allow an attacker to read sensitive memory contents or execute arbitrary code within the context of the affected process, compromising confidentiality, integrity, and availability of the system or data handled by the application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening or importing untrusted PRT files and limit exposure to potentially malicious files. Monitor Autodesk's official channels for updates regarding patches or mitigations.