Vulnerability · Published Aug 10, 2022 · Assigned by autodesk
CVE-2022-25793
High 7.8
In plain English
A high-severity security flaw in Autodesk 3ds Max. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.4%top 67.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This vulnerability may allow arbitrary code execution on affected installations of Autodesk 3ds Max.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Autodesk 3ds Max | Autodesk 3ds Max 2022, 2021, 2020 |
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0006 x_refsource_MISC