CVE-2025-4605

MEDIUM EPSS 7.6%
Published Jun 11, 20251y ago · Modified Jun 17, 20262w ago
6.6 CVSS 3.1
Medium
Find Similar
Published Jun 11, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service (DoS), or cause data corruption.

CVSS Details

Base Score
6.6
Exploitability
1.8
Impact
4.7
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality Low
Integrity Low
Availability High

Threat Intelligence

EPSS Exploit Probability
7.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 2

CWE-770
CWE-789

Affected Products 3

VendorProductVersionRange
autodeskmaya*≥2025  –  <2025.3.1
autodeskuniversal_scene_description0.10any
autodeskuniversal_scene_description0.31.0any

References 4

  • github.com https://github.com/Autodesk/3dsmax-usd
  • github.com https://github.com/Autodesk/maya-usd
  • autodesk.com https://www.autodesk.com/products/autodesk-access/overview
  • autodesk.com https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0011
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.