CVE-2022-42947

A maliciously crafted X_B file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer

High · published December 19, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

A maliciously crafted X_B file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.5th percentile
Published
2022-12-19T00:00Z
EPSS history
Timeline
  • 19 DEC 00:00Z
    A maliciously crafted X_B file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer
    cvelistv5