Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2025-4605

USD File Parsing Memory Allocation Vulnerability

Description

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service (DoS), or cause data corruption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Autodesk USD for Maya

Default version status: unaffected

  • Maya USD 0.31.0 to < Maya USD 0.32.0affected

Autodesk USD for 3ds Max

Default version status: unaffected

  • Max USD 0.10 to < Max USD 0.11affected

Autodesk Maya

Default version status: unaffected

  • 2025 to < 2025.3.1affected

References