InfoSec Signals™
Sign InStart Free
Back to CVE records
High 7.8Published Sep 16, 2025

CVE-2025-8893PDF File Parsing Out-of-Bounds Write Vulnerability

Updated under an hour ago ()

Does this affect you?

It affects Autodesk Revit and 11 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

CVSS
7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-787
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
autodesk
NVD analysis
Analyzed
Record last updated
Feb 26, 2026
First seen by InfoSec Signals
Oct 18, 2026

Affected products

Affected products
Autodesk Revit
autodesk:revit
from 2026 before 2026.3; from 2025 before 2025.4.3; from 2024 before 2024.3.4
CNA record
Autodesk Revit LT
autodesk:revit_lt
from 2026 before 2026.3; from 2025 before 2025.4.3; from 2024 before 2024.3.4
CNA record
Autodesk AutoCAD
autodesk:autocad
from 2026 before 2026.1; from 2025 before 2025.1.3; from 2024 before 2024.1.8; from 2023 before 2023.1.8
CNA record
Autodesk AutoCAD Architecture
autodesk:autocad_architecture
from 2026 before 2026.1; from 2025 before 2025.1.3; from 2024 before 2024.1.8; from 2023 before 2023.1.8
CNA record
Autodesk AutoCAD Electrical
autodesk:autocad_electrical
from 2026 before 2026.1; from 2025 before 2025.1.3; from 2024 before 2024.1.8; from 2023 before 2023.1.8
CNA record
Autodesk AutoCAD Mechanical
autodesk:autocad_mechanical
from 2026 before 2026.1; from 2025 before 2025.1.3; from 2024 before 2024.1.8; from 2023 before 2023.1.8
CNA record
Autodesk AutoCAD MEP
autodesk:autocad_mep
from 2026 before 2026.1; from 2025 before 2025.1.3; from 2024 before 2024.1.8; from 2023 before 2023.1.8
CNA record
Autodesk AutoCAD Plant 3D
autodesk:autocad_plant_3d
from 2026 before 2026.1; from 2025 before 2025.1.3; from 2024 before 2024.1.8; from 2023 before 2023.1.8
CNA record
Autodesk AutoCAD MAP 3D
autodesk:autocad_map_3d
from 2026 before 2026.1; from 2025 before 2025.1.3; from 2024 before 2024.1.8; from 2023 before 2023.1.8
CNA record
Autodesk Civil 3D
autodesk:civil_3d
from 2026 before 2026.1; from 2025 before 2025.1.3; from 2024 before 2024.1.8; from 2023 before 2023.1.8
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.