ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-25003

—
CVSS 3.1
7.8 high
EPSS
<1%p16
Published
()
Modified
Description

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution.

Vendors
autodesk
Products
alias, autocad, autocad advance steel, autocad architecture, autocad civil 3d, autocad electrical, autocad lt, autocad map 3d, autocad mechanical, autocad mep, autocad plant 3d, infraworks
Weakness
CWE-125, CWE-787
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.