CVE-2023-27907: High severity autodesk maya vulnerability
Published Apr 17, 2023
·Updated
A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution.
Affected Software
1 affected component
Autodesk Maya Usd<0.23.0
Event History
Apr 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-27907?
CVE-2023-27907 is a vulnerability that allows a malicious actor to execute arbitrary code by tricking a victim into opening a malicious USD file.
2
What software is affected by CVE-2023-27907?
Autodesk Maya USD version 0.23.0 and earlier are affected by CVE-2023-27907.
3
How severe is CVE-2023-27907?
CVE-2023-27907 has a severity rating of 7.8 (High).
4
How can I fix CVE-2023-27907?
To fix CVE-2023-27907, update Autodesk Maya USD to a version later than 0.23.0.
5
Where can I find more information about CVE-2023-27907?
You can find more information about CVE-2023-27907 in the Autodesk Security Advisories: [https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0003](https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0003)