# CVE-2025-9458: A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption…

Source: https://junglewise.ai/threats/cve-2025-9458-a-maliciously-crafted-prt-file-when-parsed-through-certain  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-07  
License: CC BY 4.0 with a link back

CVE-2025-9458 · Severity: high · CVSS 7.8 · Published 2025-11-07

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Technologies: [Autodesk 3ds Max](https://junglewise.ai/threats/technologies/3ds-max), [Autodesk Advance Steel](https://junglewise.ai/threats/technologies/advance-steel), [Autodesk AutoCAD](https://junglewise.ai/threats/technologies/autocad), [Autodesk Autocad Architecture](https://junglewise.ai/threats/technologies/autocad-architecture), [Autodesk Autocad Electrical](https://junglewise.ai/threats/technologies/autocad-electrical), [Autodesk Autocad Map 3d](https://junglewise.ai/threats/technologies/autocad-map-3d), [Autodesk Autocad Mechanical](https://junglewise.ai/threats/technologies/autocad-mechanical), [Autodesk Autocad Mep](https://junglewise.ai/threats/technologies/autocad-mep), [Autodesk Autocad Plant 3d](https://junglewise.ai/threats/technologies/autocad-plant-3d), [Autodesk Civil 3d](https://junglewise.ai/threats/technologies/civil-3d), [Autodesk Infraworks](https://junglewise.ai/threats/technologies/infraworks), [Autodesk Inventor](https://junglewise.ai/threats/technologies/inventor), [Autodesk Revit](https://junglewise.ai/threats/technologies/revit), [Autodesk Revit Lt](https://junglewise.ai/threats/technologies/revit-lt), [Autodesk Shared Components](https://junglewise.ai/threats/technologies/shared-components), [Autodesk Vault](https://junglewise.ai/threats/technologies/autodesk-vault). Vendors: [Autodesk](https://junglewise.ai/threats/vendors/autodesk).

## Quick answers

**Is CVE-2025-9458 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-9458 being exploited in the wild.

**How severe is CVE-2025-9458?** High severity, with a CVSS score of 7.8, published 7 November 2025.

**Which products and versions are affected?** Autodesk 3ds Max, Autodesk Advance Steel, Autodesk AutoCAD, Autodesk Autocad Architecture and 12 more. The advisory does not name versions.

**Is there a fix for CVE-2025-9458?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-9458?** Check whether you run Autodesk 3ds Max, Autodesk Advance Steel, Autodesk AutoCAD or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Autodesk 3ds Max
- Autodesk Advance Steel
- Autodesk AutoCAD
- Autodesk Autocad Architecture
- Autodesk Autocad Electrical
- Autodesk Autocad Map 3d
- Autodesk Autocad Mechanical
- Autodesk Autocad Mep
- Autodesk Autocad Plant 3d
- Autodesk Civil 3d
- Autodesk Infraworks
- Autodesk Inventor
- Autodesk Revit
- Autodesk Revit Lt
- Autodesk Shared Components
- Autodesk Vault

## Related threats

- [Autodesk 3ds Max out-of-bounds write in FLT file parsing](https://junglewise.ai/threats/cve-2026-7455-autodesk-3ds-max-out-of-bounds-write-in-flt-file-parsing)
- [Autodesk 3ds Max memory corruption in SVG parsing](https://junglewise.ai/threats/cve-2026-19568-autodesk-3ds-max-memory-corruption-in-svg-parsing)
- [Autodesk 3ds Max out-of-bounds write in ABC file parsing](https://junglewise.ai/threats/cve-2026-16783-autodesk-3ds-max-out-of-bounds-write-in-abc-file-parsing)
- [Autodesk 3ds Max out-of-bounds read in SVG parsing](https://junglewise.ai/threats/cve-2026-16782-autodesk-3ds-max-out-of-bounds-read-in-svg-parsing)
- [Autodesk 3ds Max uncontrolled recursion in SVG parsing](https://junglewise.ai/threats/cve-2026-16781-autodesk-3ds-max-uncontrolled-recursion-in-svg-parsing)