This vulnerability (CVE-2025-9456) affects Autodesk Shared Components version 1.8.0.7 and is caused by an out-of-bounds write condition when parsing maliciously crafted SLDPRT files. The flaw can lead to memory corruption, enabling arbitrary code execution in the context of the current process. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, but user interaction needed. The vulnerability is publicly disclosed but lacks an official patch or vendor advisory detailing remediation steps.

Exploitation of this vulnerability can result in complete compromise of the affected process, including execution of arbitrary code with the privileges of the user running the Autodesk Shared Components. This can lead to confidentiality, integrity, and availability impacts rated high. However, exploitation requires local access and user interaction, which somewhat limits remote attack feasibility. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening SLDPRT files from untrusted sources and restrict local access to trusted users only.