Autodesk 3ds Max Usd vulnerabilities

4 CVEs affecting Autodesk 3ds Max Usd, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-25009, published 2023-05-12.

More from Autodesk.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-25006, published 2023-05-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A malicious actor may convince a user to open a malicious USD file that may trigger a use-after-free vulnerability which could result in code execution.
• CVE-2023-25009, published 2023-05-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code execution.
• CVE-2023-25008, published 2023-05-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds read vulnerability which could result in code execution.
• CVE-2023-25007, published 2023-05-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execution.