This vulnerability (CVE-2025-7497) involves an out-of-bounds write (CWE-787) triggered by processing a maliciously crafted PRT file in Autodesk Shared Components version 1.6.2.11. The flaw allows an attacker to write outside the intended memory bounds, potentially leading to memory corruption. Successful exploitation can cause denial of service via crashes, data corruption, or arbitrary code execution with the privileges of the affected process. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, but user interaction needed.

The impact includes potential application crashes, data corruption, and arbitrary code execution in the context of the current user process. This can lead to compromise of the affected system or data integrity issues. However, exploitation requires local access and user interaction, which limits remote exploitation scenarios. There are no known exploits in the wild at this time.

No patch or official remediation is currently available for this vulnerability. Users should monitor Autodesk advisories for updates. Until a fix is released, avoid opening untrusted PRT files and limit local user access to trusted personnel. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.