Autodesk Maya Usd vulnerabilities

6 CVEs affecting Autodesk Maya Usd, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-29068, published 2023-06-27.

More from Autodesk.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-27907, published 2023-04-17. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution.
• CVE-2023-27906, published 2023-04-17. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution.
• CVE-2023-25010, published 2023-04-17. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution.
• CVE-2023-25003, published 2023-06-23. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to…
• CVE-2023-29068, published 2023-06-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code…
• CVE-2023-25004, published 2023-06-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.