Skip to content
OpenAdvisories
Medium · 6.6 CVE-2025-4605 EUVD-2025-18111GHSA-x8wm-pq66-9pp3

USD File Parsing Memory Allocation Vulnerability

Published Jun 11, 2025 · Updated Aug 19, 2025 · Assigned by autodesk

Description

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service (DoS), or cause data corruption.

Affected products

VendorProductAffectedFixed
Autodesk USD for Maya Maya USD 0.31.0 – < Maya USD 0.32.0 Maya USD 0.32.0
Autodesk USD for 3ds Max Max USD 0.10 – < Max USD 0.11 Max USD 0.11
Autodesk Maya 2025 – < 2025.3.1 2025.3.1

References