Vulnerability in Autodesk 3ds Max
CVE-2022-25793
A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This vulnerability may allow arbitrary code execution on affected installations of Autodesk 3ds Max.
EPSS: 0.003 (27.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Autodesk 3ds_max
- N/a Autodesk 3ds Max — versions Autodesk 3ds Max 2022, 2021, 2020
Weakness classification (CWE)
References
- psirt@autodesk.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-25793?
- CVE-2022-25793 is a high-severity vulnerability in Autodesk 3ds Max, classified under Improper Validation of Specified Quantity in Input. CVSS score: 7.8/10. Published 2022-08-10.
- How severe is CVE-2022-25793?
- High severity. CVSS v3 base score is 7.8 out of 10.