This vulnerability (CVE-2025-9453) is an Out-of-Bounds Read (CWE-125) in Autodesk Shared Components 1.8.0.7. When a specially crafted PRT file is parsed by affected Autodesk products, it can cause memory to be read outside of intended bounds. This flaw can be exploited by a local attacker with user interaction to cause denial of service, disclose sensitive information, or execute arbitrary code with the privileges of the current process. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The attack vector is local (AV:L), with low attack complexity (AC:L), no privileges required (PR:N), but requires user interaction (UI:R). The scope remains unchanged (S:U).

Successful exploitation can result in application crashes, disclosure of sensitive information, or arbitrary code execution within the context of the current user. This could lead to compromise of the affected system or data accessible by the Autodesk Shared Components process.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid opening untrusted or suspicious PRT files in Autodesk products using the affected Shared Components version. Monitor Autodesk's official channels for updates and patches.