CVE-2022-25793
High
Description
A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This vulnerability may allow arbitrary code execution on affected installations of Autodesk 3ds Max.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Autodesk 3ds Max
PublishedAug 10, 2022
First seenAug 10, 2022
How to fix
Update
- autodesk 3ds_max2020.3.6, 2021.3.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| autodesk 3ds_max | 2020 ≤ v < 2020.3.6, 2021 ≤ v < 2021.3.10, 2022 ≤ v ≤ 2022.3.3 | 2020.3.6, 2021.3.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.