CVE-2022-25793: Buffer Overflow
A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This vulnerability may allow arbitrary code execution on affected installations of Autodesk 3ds Max.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-25793?
CVE-2022-25793 is a stack-based buffer overflow vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 that may lead to code execution through the lack of proper validation of the length of user-supplied data.
What software versions are affected by CVE-2022-25793?
CVE-2022-25793 affects Autodesk 3ds Max versions 2022.3.3 to 2022, 2021.3.10 to 2021, and 2020.3.6 to 2020.
What is the severity of CVE-2022-25793?
CVE-2022-25793 has a severity rating of 7.8 (high).
How can CVE-2022-25793 be exploited?
CVE-2022-25793 can be exploited by providing user-supplied data with a length that exceeds the bounds of a fixed-length stack-based buffer when parsing ActionScript Byte Code files.
Is there a fix available for CVE-2022-25793?
Yes, Autodesk has released security updates to address the vulnerability. It is recommended to update to the latest version of Autodesk 3ds Max.