This vulnerability (CVE-2025-7675) is an Out-of-Bounds Write (CWE-787) in Autodesk Shared Components 1.6.2.11. It occurs when a specially crafted 3DM file is parsed, allowing a malicious actor to write outside allocated memory bounds. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The attack vector is local with low complexity and no privileges required, but user interaction is necessary. The vulnerability can cause crashes, data corruption, or arbitrary code execution in the context of the current process. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation can result in a crash of the affected Autodesk application, corruption of data processed by the software, or execution of arbitrary code with the privileges of the current user. This poses a significant risk to confidentiality, integrity, and availability of data handled by the vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted or suspicious 3DM files and restrict access to the affected Autodesk Shared Components version 1.6.2.11. Monitor Autodesk communications for updates on patches or workarounds.