CVE-2023-25010

CVE-2023-25010 affects Autodesk Maya USD Plugin (prior to 0.23.0). The root cause is an uninitialized variable when handling a malicious USD file, which may allow code execution. Reported in multiple sources (e.g., Autodesk security advisory ADSK-SA-2023-0003; Nessus plugin notes) with a CVSSv3.1...

CVE-2023-27907

The CVE-2023-27907 entry concerns Autodesk Maya USD Plugin prior to 0.23.0. The vulnerability is triggered by opening a malicious USD file and involves an out-of-bounds write that may lead to code execution. The affected component is the Maya USD Plugin (Autodesk Maya); other related advisories r...

CVE-2023-27906

CVE-2023-27906 affects Autodesk Maya USD Plugin prior to 0.23.0. The vulnerability is an out-of-bounds read in the USD file handling that may lead to code execution when a victim opens a malicious USD file. Connected sources (Nessus ADSK-SA-2023-0003) corroborate multiple vulnerabilities in the a...