CVE-2022-42947

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-19 · updated 2026-06-17
Weakness: CWE-787

Description

A maliciously crafted X_B file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.

Affected products

Autodesk Maya: 2023

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020

Get alerted when CVE-2022-42947 or the next vulnerability affects your stack