Vulnerability · Published Jun 27, 2023 · Assigned by autodesk

CVE-2023-25002

High 7.8

In plain English

A high-severity security flaw in Multiple. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 29% of all known vulnerabilities).

Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 71.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

Affected products (as reported)

VendorProductVersions
n/a Multiple 2023, 2022, 2021

References