« Volver al listado

CVE-2025-4605

Estado: ModificadaMedia (6.6)—

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service (DoS), or cause data corruption.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Autodesk — MayaAutodesk — Universal Scene Description

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-4605",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-4605",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-06-11T14:02:40.218311Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@autodesk.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.6,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 1.8
      },
      {
        "type": "Secondary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.6,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@autodesk.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:autodesk:usd_for_maya:maya_usd_0.31.0:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "USD for Maya",
          "versions": [
            {
              "status": "affected",
              "version": "Maya USD 0.31.0",
              "lessThan": "Maya USD 0.32.0",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:usd_for_3ds_max:max_usd_0.10:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "USD for 3ds Max",
          "versions": [
            {
              "status": "affected",
              "version": "Max USD 0.10",
              "lessThan": "Max USD 0.11",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:maya:2025:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "Maya",
          "versions": [
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.3.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-06-11T14:15:36.847",
  "references": [
    {
      "url": "https://github.com/Autodesk/3dsmax-usd",
      "source": "psirt@autodesk.com"
    },
    {
      "url": "https://github.com/Autodesk/maya-usd",
      "source": "psirt@autodesk.com"
    },
    {
      "url": "https://www.autodesk.com/products/autodesk-access/overview",
      "source": "psirt@autodesk.com"
    },
    {
      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0011",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@autodesk.com"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@autodesk.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-789"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service (DoS), or cause data corruption."
    },
    {
      "lang": "es",
      "value": "Un archivo .usdc manipulado con fines maliciosos, al cargarse a través de Autodesk Maya, puede forzar una vulnerabilidad de asignación de memoria incontrolada. Un agente malicioso podría aprovechar esta vulnerabilidad para provocar una denegación de servicio (DoS) o dañar los datos."
    }
  ],
  "lastModified": "2026-06-17T09:33:36.803",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:autodesk:maya:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D795C312-49DD-48BF-94A2-06E1A7A6126B",
              "versionEndExcluding": "2025.3.1",
              "versionStartIncluding": "2025"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:universal_scene_description:0.10:*:*:*:*:3ds_max:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ABD7667F-D90C-440E-9483-578B49B9A9EB"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:universal_scene_description:0.31.0:*:*:*:*:maya:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9EBB5C23-E35F-41B3-B11F-B582EC1C7007"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@autodesk.com"
}