An Out-of-Bounds Write vulnerability in Autodesk Shared Components allows attackers to execute arbitrary code or cause system crashes through malicious PRT files.

This is an Out-of-Bounds Write vulnerability (CWE-787) triggered when the software parses a maliciously crafted PRT file. The vulnerability is exploitable by an unauthenticated attacker, provided the user can be induced to open a malicious file within the context of the affected process.

Successful exploitation poses a severe risk to organizational security, as it allows for arbitrary code execution in the context of the current user process. Given the CVSS score of 7.8, this high-severity flaw could lead to full system compromise, data theft, or significant operational disruption. Organizations relying on Autodesk software for design or engineering workflows should treat this as a high-priority risk.

Immediate Action: Update Autodesk Shared Components to version 1.7.0.10 or later as specified in the official Autodesk security advisory.

Proactive Monitoring: Monitor endpoint activity for unexpected child processes spawned by Autodesk applications or abnormal memory usage patterns during file parsing operations.

Compensating Controls: Implement strict file access policies and ensure users are educated not to open PRT files from untrusted or unverified sources.

Public Exploit Available: No (exploit_available: false)

The potential for arbitrary code execution makes this a critical security priority for any environment utilizing affected Autodesk products. Security teams must ensure that the vendor-provided updates are deployed across all workstations and servers immediately to eliminate the underlying memory corruption vector.