CVE-2025-4605

Medium CVSS: 6.6

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service (DoS), or cause data corruption.

Vendor

Autodesk

Product

Maya

CWE

CWE-789

Yayın Tarihi

2025-06-11 14:15:36

Güncelleme

2025-08-19 14:15:39

Source Identifier

psirt@autodesk.com

KEV Date Added

Kategoriler

CWE-789 Maya MEDIUM Autodesk 2025

Referanslar

https://github.com/Autodesk/3dsmax-usd https://github.com/Autodesk/maya-usd https://www.autodesk.com/products/autodesk-access/overview https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0011

Benzer Kayıtlar

High

CVE-2026-0874

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vuln…

High

CVE-2026-0875

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulner…

High

CVE-2026-0536

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerabil…

High

CVE-2026-0662

A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitra…

High

CVE-2026-0537

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A mal…

High

CVE-2026-0538

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A…