CVE-2023-25003: Autodesk Alias

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution.

Affected products

  • Autodesk Alias: from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Autocad: from 2020, before 2020.1.6 (fixed in 2020.1.6); from 2021, before 2021.1.3 (fixed in 2021.1.3); from 2022, before 2022.1.3 (fixed in 2022.1.3); from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Autocad Advance Steel: from 2020, before 2020.1.6 (fixed in 2020.1.6); from 2021, before 2021.1.3 (fixed in 2021.1.3); from 2022, before 2022.1.3 (fixed in 2022.1.3); from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Autocad Architecture: from 2020, before 2020.1.6 (fixed in 2020.1.6); from 2021, before 2021.1.3 (fixed in 2021.1.3); from 2022, before 2022.1.3 (fixed in 2022.1.3); from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Autocad Civil 3d: from 2020, before 2020.1.6 (fixed in 2020.1.6); from 2021, before 2021.1.3 (fixed in 2021.1.3); from 2022, before 2022.1.3 (fixed in 2022.1.3); from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Autocad Electrical: from 2020, before 2020.1.6 (fixed in 2020.1.6); from 2021, before 2021.1.3 (fixed in 2021.1.3); from 2022, before 2022.1.3 (fixed in 2022.1.3); from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Autocad Lt: from 2020, before 2020.1.6 (fixed in 2020.1.6); from 2021, before 2021.1.3 (fixed in 2021.1.3); from 2022, before 2022.1.3 (fixed in 2022.1.3); from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Autocad Map 3d: from 2020, before 2020.1.6 (fixed in 2020.1.6); from 2021, before 2021.1.3 (fixed in 2021.1.3); from 2022, before 2022.1.3 (fixed in 2022.1.3); from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Autocad Mechanical: from 2020, before 2020.1.6 (fixed in 2020.1.6); from 2021, before 2021.1.3 (fixed in 2021.1.3); from 2022, before 2022.1.3 (fixed in 2022.1.3); from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Autocad Mep: from 2020, before 2020.1.6 (fixed in 2020.1.6); from 2021, before 2021.1.3 (fixed in 2021.1.3); from 2022, before 2022.1.3 (fixed in 2022.1.3); from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Autocad Plant 3d: from 2020, before 2020.1.6 (fixed in 2020.1.6); from 2021, before 2021.1.3 (fixed in 2021.1.3); from 2022, before 2022.1.3 (fixed in 2022.1.3); from 2023, before 2023.1.1 (fixed in 2023.1.1)
  • Autodesk Infraworks: from 2021, before 2021.2 (fixed in 2021.2); from 2022, before 2022.1 (fixed in 2022.1); from 2023, before 2023.1 (fixed in 2023.1)
  • Autodesk Inventor: from 2021, before 2021.5 (fixed in 2021.5); from 2022, before 2022.4 (fixed in 2022.4); from 2023, before 2023.3.1 (fixed in 2023.3.1)
  • Autodesk Maya Usd: from 2022, before 2022.5 (fixed in 2022.5); from 2023, before 2023.3 (fixed in 2023.3)
  • Autodesk Navisworks: from 2022, before 2022.4 (fixed in 2022.4); from 2023, before 2023.2 (fixed in 2023.2)
  • Autodesk Revit: from 2021, before 2021.1.8 (fixed in 2021.1.8)
  • Autodesk Vred: from 2023, before 2023.4 (fixed in 2023.4)

Published 2023-06-23. Last modified 2026-06-17.