CVE-2023-25006

2023-05-1200:00:00

autodesk

www.cve.org

malicious actor

usd file

use-after-free

code execution

vulnerability

EPSS

0.002

Percentile

56.9%

JSON

A malicious actor may convince a user to open a malicious USD file that may trigger a use-after-free vulnerability which could result in code execution.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Autodesk 3ds Max USD Plugin",
    "versions": [
      {
        "version": "0.3",
        "status": "affected"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2023-0008

EPSS

0.002

Percentile

56.9%

JSON

Related for CVELIST:CVE-2023-25006