high7.8
CVE-2023-25002
A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability.
Impact
A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autodesk | 3ds Max | Versions 2022, 2023 |
| Autodesk | Navisworks | Versions 2022, 2023 |
| Autodesk | Revit | Versions 2022, 2023 |
| Autodesk | Vred | Version 2023 |