Description (CNA)
A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service (DoS), or cause data corruption.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Autodesk / USD for Maya | affected Maya USD 0.31.0 before Maya USD 0.32.0 |
| Autodesk / USD for 3ds Max | affected Max USD 0.10 before Max USD 0.11 |
| Autodesk / Maya | affected 2025 before 2025.3.1 |
CWE
CWE-789
References
- https://github.com/Autodesk/maya-usd
- https://github.com/Autodesk/3dsmax-usd
- https://www.autodesk.com/products/autodesk-access/overview
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0011
ADP enrichment
No English description supplied.
No references supplied.