Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2025-4605
Modified
More InfoOfficial Page
Source-psirt@autodesk.com
View Known Exploited Vulnerability (KEV) details
Published At-11 Jun, 2025 | 14:15
Updated At-19 Aug, 2025 | 14:15

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service (DoS), or cause data corruption.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.16.6MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Secondary3.16.6MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CPE Matches
Autodesk Inc.
autodesk
>>maya>>Versions from 2025(inclusive) to 2025.3.1(exclusive)
cpe:2.3:a:autodesk:maya:*:*:*:*:*:*:*:*
Autodesk Inc.
autodesk
>>universal_scene_description>>0.10
cpe:2.3:a:autodesk:universal_scene_description:0.10:*:*:*:*:3ds_max:*:*
Autodesk Inc.
autodesk
>>universal_scene_description>>0.31.0
cpe:2.3:a:autodesk:universal_scene_description:0.31.0:*:*:*:*:maya:*:*
Weaknesses
CWE IDTypeSource
CWE-789Secondarypsirt@autodesk.com
CWE-770Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://github.com/Autodesk/3dsmax-usdpsirt@autodesk.com
N/A
https://github.com/Autodesk/maya-usdpsirt@autodesk.com
N/A
https://www.autodesk.com/products/autodesk-access/overviewpsirt@autodesk.com
N/A
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0011psirt@autodesk.com
Vendor Advisory
Change History
0Changes found
Details not found