Overview
CVE-2025-6636 is a severe vulnerability discovered in certain Autodesk products that can be exploited via a maliciously crafted PRT file. This vulnerability can potentially lead to a system compromise or data leakage. Given the widespread use of Autodesk products in industries ranging from architecture to entertainment, this vulnerability has the potential to affect a large number of systems worldwide. It is therefore critical that users of affected Autodesk products understand the nature of this vulnerability and take the necessary steps to mitigate its potential impact.
Vulnerability Summary
CVE ID: CVE-2025-6636
Severity: High (7.8 CVSS score)
Attack Vector: Network
Privileges Required: None
User Interaction: Required
Impact: System compromise or data leakage
Affected Products
Escape the Surveillance Era
Most apps won’t tell you the truth.
They’re part of the problem.
Phone numbers. Emails. Profiles. Logs.
It’s all fuel for surveillance.
Ameeba Chat gives you a way out.
- • No phone number
- • No email
- • No personal info
- • Anonymous aliases
- • End-to-end encrypted
Chat without a trace.
Product | Affected Versions
Autodesk AutoCAD | All versions prior to 2025.1
Autodesk Revit | All versions prior to 2025.1
How the Exploit Works
The vulnerability revolves around the processing of PRT files by certain Autodesk products. A malicious actor can craft a PRT file in such a way that it triggers a use-after-free vulnerability when parsed. This could result in unexpected behaviors ranging from a system crash to the disclosure of sensitive data. In the worst-case scenario, it can even allow the attacker to execute arbitrary code in the context of the current process, potentially leading to a full system compromise.
Conceptual Example Code
Below is a conceptual example of how the vulnerability might be exploited. In this scenario, a malicious actor sends a crafted PRT file to the target via email. The target then unknowingly opens the file with a vulnerable Autodesk product, triggering the exploit.
# Attacker crafts malicious PRT file
echo "malicious_code" > exploit.prt
# Attacker sends malicious PRT file to target
mail -s "Important Project File" -a exploit.prt target@example.comMitigation Guidance
The best way to mitigate this vulnerability is by applying the patch provided by Autodesk. If for some reason the patch cannot be immediately applied, a temporary workaround would be to employ a Web Application Firewall (WAF) or Intrusion Detection System (IDS) to detect and block attempts to exploit this vulnerability. However, these are only temporary measures and applying the vendor patch as soon as possible remains the best course of action.
