CVE-2023-25009

A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code execution...

CVE-2023-25009

A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code execution...

CVE-2023-25009

CVE-2023-25009 affects Autodesk 3DS Max via the USD file parser. The issue is an out-of-bounds write in parsing USD files, which can allow remote code execution when a user opens a malicious USD file or is prompted to view one. The vulnerability stems from crafted USD data that causes a write pas...