What is CVE-2023-25002?

CVE-2023-25002 is a vulnerability in Autodesk products that allows a maliciously crafted SKP file to trigger a use-after-free vulnerability, potentially leading to code execution.

Which Autodesk products are affected by CVE-2023-25002?

Autodesk 3ds Max 2022 and 2023, Autodesk Navisworks 2022 and 2023, Autodesk Revit 2022 and 2023, and Autodesk VRED 2023 are all affected by CVE-2023-25002.

How severe is CVE-2023-25002?

CVE-2023-25002 has a severity score of 7.8 (high).

How can CVE-2023-25002 be exploited?

CVE-2023-25002 can be exploited by using a specially crafted SKP file in Autodesk products.

Is there a fix for CVE-2023-25002?

Autodesk has released a security advisory (ADSK-SA-2023-0002) with information on how to mitigate the vulnerability. Please refer to their website for the necessary steps.

Vulnerability/
CVE-2023-25002

high

7.8

CWE

416

27/6/2023

6/7/2023

CVE-2023-25002: Use After Free

First published: Tue Jun 27 2023(Updated: )

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

Credit: psirt@autodesk.com

Affected Software	Affected Version	How to fix
Autodesk 3ds Max	=2022
Autodesk 3ds Max	=2023
Autodesk Navisworks	=2022
Autodesk Navisworks	=2023
Autodesk Revit	=2022
Autodesk Revit	=2023
Autodesk VRED	=2023

Never miss a vulnerability like this again

Reference Links

https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0002

Frequently Asked Questions

What is CVE-2023-25002?
CVE-2023-25002 is a vulnerability in Autodesk products that allows a maliciously crafted SKP file to trigger a use-after-free vulnerability, potentially leading to code execution.
Which Autodesk products are affected by CVE-2023-25002?
Autodesk 3ds Max 2022 and 2023, Autodesk Navisworks 2022 and 2023, Autodesk Revit 2022 and 2023, and Autodesk VRED 2023 are all affected by CVE-2023-25002.
How severe is CVE-2023-25002?
CVE-2023-25002 has a severity score of 7.8 (high).
How can CVE-2023-25002 be exploited?
CVE-2023-25002 can be exploited by using a specially crafted SKP file in Autodesk products.
Is there a fix for CVE-2023-25002?
Autodesk has released a security advisory (ADSK-SA-2023-0002) with information on how to mitigate the vulnerability. Please refer to their website for the necessary steps.

collector/nvd-index
agent/weakness
agent/author
agent/severity
agent/references
agent/type
agent/tags
agent/event
agent/description
vendor/autodesk
canonical/autodesk 3ds max
version/autodesk 3ds max/2022
version/autodesk 3ds max/2023
canonical/autodesk navisworks
version/autodesk navisworks/2022
version/autodesk navisworks/2023
canonical/autodesk revit
version/autodesk revit/2022
version/autodesk revit/2023
canonical/autodesk vred
version/autodesk vred/2023

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.