CVE-2022-42946

—

CVSS 3.1

7.1 high

EPSS

<1%p18

Published

Dec 19, 2022 (Dec 19, 2022)

Modified

Jun 17, 2026

Description

Parsing a maliciously crafted X_B and PRT file can force Autodesk Maya 2023 and 2022 to read beyond allocated buffer. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Vendors: autodesk
Products: maya
Weakness: CWE-125, CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.