Approved changes feed: RSS · Atom

cpe:2.3:a:autodesk:maya_usd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAutodesk (63e0b459-a294-5304-99c8-fcb7d9c8113e)
ProductMaya Usd (2865cf67-e074-5249-bc60-3b2f3513e301)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/autodesk/maya-usd purl2cpe 2026-06-01 10:11:38.378471

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29068 vulnerable 2026-06-08 06:02:38.567957 Details available
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Published: 2023-06-27T00:00:00.000Z
Updated: 2024-12-05T14:41:43.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27907 vulnerable 2026-06-08 05:57:42.450288 Details available
A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution.
Published: 2023-04-17T00:00:00.000Z
Updated: 2025-02-06T16:14:36.702Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27906 vulnerable 2026-06-08 05:57:42.449778 Details available
A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution.
Published: 2023-04-17T00:00:00.000Z
Updated: 2025-02-06T16:16:28.652Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25010 vulnerable 2026-06-08 05:56:08.357704 Details available
A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution.
Published: 2023-04-17T00:00:00.000Z
Updated: 2025-02-06T15:27:25.812Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25004 vulnerable 2026-06-08 05:56:08.341465 Details available
A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.
Published: 2023-06-27T00:00:00.000Z
Updated: 2024-12-05T14:40:18.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25003 vulnerable 2026-06-08 05:56:08.337090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.