CVE-2022-42947

A maliciously crafted XB file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

Design/Logic Flaw

Parsing a maliciously crafted XB and PRT file can force Autodesk Maya 2023 and 2022 to read beyond allocated buffer. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

Spoofing

A maliciously crafted XB file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

PT-2022-26673 · Autodesk · Autodesk Maya

Name of the Vulnerable Software and Affected Versions: Autodesk Maya versions 2022 through 2023 Description: Parsing a maliciously crafted X B and PRT file can force Autodesk Maya to read beyond allocated buffer. This issue, in conjunction with other vulnerabilities, could lead to code execution ...

CVE-2022-42947

A maliciously crafted XB file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

Autodesk Maya 缓冲区错误漏洞

Autodesk Maya is a three-dimensional computer graphics software from the American company Autodesk. It is widely used to create digital special effects for movies, television, commercials, computer games, and video games. Autodesk Maya 2023 suffers from a buffer error vulnerability that stems fro...

CVE-2022-42946

Parsing a maliciously crafted XB and PRT file can force Autodesk Maya 2023 and 2022 to read beyond allocated buffer. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

PT-2022-26674 · Autodesk · Autodesk Maya

Name of the Vulnerable Software and Affected Versions: Autodesk Maya versions 2022 through 2023 Description: A maliciously crafted X B file can be used to write beyond the allocated buffer when parsed through Autodesk Maya. This issue can lead to arbitrary code execution. Recommendations: For...

CVE-2022-42946

Parsing a maliciously crafted XB and PRT file can force Autodesk Maya 2023 and 2022 to read beyond allocated buffer. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2022-42946

CVE-2022-42946 affects Autodesk Maya (2022/2023) via parsing of X_B and PRT files. The vulnerability can cause reads (and in some advisories writes) beyond allocated buffers, enabling code execution in the process context. ZDI reports remote code execution with user interaction (visiting a malici...

CVE-2022-42947

A maliciously crafted XB file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

CVE-2022-42947

CVE-2022-42947 is an out-of-bounds write vulnerability in Autodesk Maya (versions 2022 and 2023) triggered by parsing a malicious X_B file. The issue allows arbitrary code execution and is exploitable with user interaction (the attacker must entice the target to open or process a crafted X_B file...

Autodesk Maya 缓冲区错误漏洞

Autodesk Maya is a three-dimensional computer graphics software from the American company Autodesk. It is widely used to create digital special effects for movies, television, commercials, computer games, and video games. Autodesk Maya 2023 suffers from a buffer error vulnerability that stems fro...

CVE-2022-33886

A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an...

CVE-2022-33886

A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an...

CVE-2022-33886

A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an...

CVE-2022-33886

A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an...

CVE-2022-33886

CVE-2022-33886 affects Autodesk AutoCAD (versions up to 2023.x) and Autodesk Maya (2023/2022) via parsing of MODEL and SLDPRT files. The root cause is improper handling/validation of crafted MODEL and SLDPRT data, leading to a heap-based or general buffer overflow during parsing and resulting in ...

PT-2022-6683 · Autodesk · Autodesk Autocad +1

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD versions 2020 through 2023 Autodesk Maya versions 2022 through 2023 Description: The issue is related to the incorrect handling of exceptional states in the software, which can be exploited by using specially crafted MODEL an...

@intlgadmin/skywalking-nodejs-prisma-plugin (=1.0.0), logtube (>=2.3.0 <=2.4.0) +3 more potentially affected by CVE-2022-36127 via skywalking-backend-js (>=0.3.0 <=0.4.1)

skywalking-backend-js NPM version =0.3.0, =2.3.0, =1.2.144-2, =1.0.0, =1.0.4 Source cves: CVE-2022-36127 Source advisory: OSV:GHSA-8GPG-466C-5CPJ...