Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2023-25002

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

  • Published: Jun 28, 2023
  • Updated: Jul 7, 2023
  • CVE: CVE-2023-25002
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
autodesk / navisworks 2022 2022.x
autodesk / revit 2022 2022.x
autodesk / 3ds_max 2022 2022.x
autodesk / navisworks 2023 2023.x
autodesk / 3ds_max 2023 2023.x
autodesk / revit 2023 2023.x
autodesk / vred 2023 2023.x