Autodesk: Security Vulnerabilities
A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer when parsing the DLL files and could lead to a Privilege Escalation vulnerability.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-06-23
A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution.
CVSS Score
7.8
EPSS Score
0.003
Published
2023-06-23
A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-05-12
A malicious actor may convince a user to open a malicious USD file that may trigger a use-after-free vulnerability which could result in code execution.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-05-12
A malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execution.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-05-12
A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds read vulnerability which could result in code execution.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-05-12
A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code execution.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-05-12
A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution.
CVSS Score
7.8
EPSS Score
0.003
Published
2023-04-17
A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution.
CVSS Score
7.8
EPSS Score
0.003
Published
2023-04-17
A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution.
CVSS Score
7.8
EPSS Score
0.003
Published
2023-04-17