CVE-2023-25006: Use After Free
First published: Fri May 12 2023(Updated: )
A malicious actor may convince a user to open a malicious USD file that may trigger a use-after-free vulnerability which could result in code execution.
Credit: psirt@autodesk.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Autodesk 3ds Max Usd | <=0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-25006?
CVE-2023-25006 is a vulnerability in Autodesk 3ds Max Usd software that allows a malicious actor to execute arbitrary code by tricking a user into opening a malicious USD file.
How does CVE-2023-25006 work?
CVE-2023-25006 works by exploiting a use-after-free vulnerability in Autodesk 3ds Max Usd software when a user opens a malicious USD file.
What is the severity of CVE-2023-25006?
CVE-2023-25006 has a severity rating of 7.8 (High).
How can I fix CVE-2023-25006?
To fix CVE-2023-25006, users should update to the latest version of Autodesk 3ds Max Usd software, as this vulnerability has been patched in version 0.4 and above.
Where can I find more information about CVE-2023-25006?
More information about CVE-2023-25006 can be found in Autodesk's security advisory at https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0008.
- collector/nvd-index
- vendor/autodesk
- canonical/autodesk 3ds max usd
- version/autodesk 3ds max usd/0.3