Autodesk Maya vulnerabilities

3 CVEs affecting Autodesk Maya, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-4605, published 2025-06-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-42947, published 2022-12-19. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A maliciously crafted X_B file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.
CVE-2022-42946, published 2022-12-19. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Parsing a maliciously crafted X_B and PRT file can force Autodesk Maya 2023 and 2022 to read beyond allocated buffer. This vulnerability in conjunction with other vulnerabilities could lead to code…
CVE-2025-4605, published 2025-06-11. Medium severity, CVSS 6.6. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a…