This vulnerability (CVE-2025-9458) is a heap-based buffer overflow (CWE-122) in Autodesk Shared Components version 1.7.0.10. When a specially crafted PRT file is processed by the affected software, it triggers memory corruption that can be exploited to execute arbitrary code with the privileges of the current process. The attack vector is local (AV:L), requires no privileges (PR:N), but does require user interaction (UI:R). The vulnerability impacts confidentiality, integrity, and availability (all rated high). No known exploits are reported in the wild as of the published date. No patch or official remediation information is currently available.

Successful exploitation can lead to arbitrary code execution in the context of the current process, potentially compromising system confidentiality, integrity, and availability. The vulnerability requires local access and user interaction, which limits remote exploitation but still poses a significant risk if an attacker can convince a user to open a malicious PRT file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released by Autodesk, users should avoid opening untrusted or suspicious PRT files and limit local access to trusted users only.