CVE-2023-25003

CVE-2023-25003 affects Autodesk AutoCAD 2023 and Autodesk Maya 2022 via a malicious pskernel.dll that enables out-of-bounds read/write conditions, potentially leading to code execution. The issue is caused by a vulnerability in the pskernel.dll handling, with exploitation implied by references to...

CVE-2023-29068

CVE-2023-29068 : A maliciously crafted file consumed through the Autodesk pskernel.dll can cause memory corruption, which in conjunction with other vulnerabilities could lead to code execution in the context of the current process. The issue is associated with Autodesk products using pskernel.dll...

CVE-2023-25004

CVE-2023-25004 involves a maliciously crafted pskernel.dll in Autodesk products that triggers an integer overflow vulnerability, potentially enabling code execution. Connected advisories document affected Autodesk components such as InfraWorks and VRED variants and describe exploitation possibili...

CVE-2023-25010

CVE-2023-25010 affects Autodesk Maya USD Plugin (prior to 0.23.0). The root cause is an uninitialized variable when handling a malicious USD file, which may allow code execution. Reported in multiple sources (e.g., Autodesk security advisory ADSK-SA-2023-0003; Nessus plugin notes) with a CVSSv3.1...

CVE-2023-27907

The CVE-2023-27907 entry concerns Autodesk Maya USD Plugin prior to 0.23.0. The vulnerability is triggered by opening a malicious USD file and involves an out-of-bounds write that may lead to code execution. The affected component is the Maya USD Plugin (Autodesk Maya); other related advisories r...

CVE-2023-27906

CVE-2023-27906 affects Autodesk Maya USD Plugin prior to 0.23.0. The vulnerability is an out-of-bounds read in the USD file handling that may lead to code execution when a victim opens a malicious USD file. Connected sources (Nessus ADSK-SA-2023-0003) corroborate multiple vulnerabilities in the a...