ZDI-23-238: Unity Technologies Unity Editor DAE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-238?
The severity of ZDI-23-238 is critical due to its potential for remote code execution.
How do I fix ZDI-23-238?
To fix ZDI-23-238, ensure that you update to the latest version of the Unity Editor that addresses this vulnerability.
Who is affected by ZDI-23-238?
ZDI-23-238 affects users of Unity Technologies Unity Editor who may encounter malicious files or pages.
What type of attack does ZDI-23-238 enable?
ZDI-23-238 enables remote attackers to execute arbitrary code on affected installations of Unity Editor.
Is user interaction required for exploiting ZDI-23-238?
Yes, user interaction is required for exploiting ZDI-23-238, as the victim must visit a malicious page or open a malicious file.