GCVE - cpe:2.3:a:n/a:autodesk_3ds_max_usd_plugin:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:autodesk_3ds_max_usd_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Autodesk 3Ds Max Usd Plugin (`5bc6a40e-8bae-5e6d-b942-902c6fd6692c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-25009`	vulnerable	2026-06-08 05:56:08.355612	Details available A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code execution. Published: 2023-05-12T00:00:00.000Z Updated: 2025-01-24T19:55:30.927Z Open on db.gcve.eu Reference links https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0008	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-25008`	vulnerable	2026-06-08 05:56:08.355305	Details available A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds read vulnerability which could result in code execution. Published: 2023-05-12T00:00:00.000Z Updated: 2025-01-24T19:56:19.365Z Open on db.gcve.eu Reference links https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0008	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-25007`	vulnerable	2026-06-08 05:56:08.354912	Details available A malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execution. Published: 2023-05-12T00:00:00.000Z Updated: 2025-01-24T19:57:19.910Z Open on db.gcve.eu Reference links https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0008	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-25006`	vulnerable	2026-06-08 05:56:08.353781	Details available A malicious actor may convince a user to open a malicious USD file that may trigger a use-after-free vulnerability which could result in code execution. Published: 2023-05-12T00:00:00.000Z Updated: 2025-01-24T19:58:11.319Z Open on db.gcve.eu Reference links https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0008	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.