This vulnerability (CVE-2025-6636) involves a Use-After-Free condition (CWE-416) in Autodesk Shared Components version 1.6.2.11. When a maliciously crafted PRT file is parsed, it can trigger the vulnerability, enabling an attacker to cause application crashes, access sensitive information, or execute arbitrary code with the privileges of the current process. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The attack vector requires local access (AV:L) and user interaction (UI:R), with low attack complexity (AC:L) and no privileges required (PR:N). The vulnerability is published and assigned by Autodesk but no patch or fix information is currently available.

Successful exploitation can lead to denial of service (application crash), unauthorized disclosure of sensitive data, and arbitrary code execution within the context of the affected Autodesk Shared Components process. This can compromise the confidentiality, integrity, and availability of the affected system or data processed by the vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted or suspicious PRT files with the affected Autodesk Shared Components version 1.6.2.11. Monitor Autodesk's official channels for updates and apply patches promptly once available.