VYPR

opennurbs

by Autodesk

CVEs (2)

  • CVE-2024-23152HigJun 25, 2024
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

  • CVE-2024-37001HigJun 25, 2024
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the…