Code Execution Vulnerability in Autodesk Products

CVE-2023-25010

What is CVE-2023-25010?

A security vulnerability has been identified in multiple Autodesk products, where a malicious actor could exploit the system by convincing a user to open a specially crafted USD file. This action may lead to triggering an uninitialized variable in the application's processing, potentially allowing for arbitrary code execution. Users are advised to exercise caution when handling unexpected files and to follow security best practices to mitigate risks.

References