ZDI-23-239: Unity Technologies Unity Editor SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-239?
The severity of ZDI-23-239 is high due to its ability to allow remote attackers to execute arbitrary code.
How do I fix ZDI-23-239?
To fix ZDI-23-239, update the Unity Editor to the latest version that addresses this vulnerability.
Who is affected by ZDI-23-239?
ZDI-23-239 affects installations of the Unity Technologies Unity Editor that are not updated to the patched version.
What type of attack is ZDI-23-239?
ZDI-23-239 is a remote code execution vulnerability that requires user interaction to exploit.
What should I do if I suspect exploitation of ZDI-23-239?
If you suspect exploitation of ZDI-23-239, immediately update your Unity Editor and analyze your systems for any indicators of compromise.