This vulnerability (CVE-2025-9452) involves an out-of-bounds write (CWE-787) in Autodesk Shared Components version 1.8.0.7. When a maliciously crafted SLDPRT file is parsed, it causes memory corruption that can be exploited to execute arbitrary code with the privileges of the current process. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The attack vector is local with low attack complexity, no privileges required, but requires user interaction.

Exploitation of this vulnerability can result in arbitrary code execution, potentially allowing an attacker to take control of the affected process. This compromises confidentiality, integrity, and availability of the system running the vulnerable Autodesk Shared Components. However, exploitation requires local access and user interaction, limiting remote exploitation risk. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Autodesk's official channels for updates. Until a fix is available, avoid opening untrusted SLDPRT files and restrict local access to trusted users only.