CVE-2023-29068
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption...
CVE-2023-29068 is a high vulnerability (CVSS 7.8) in Autodesk Alias, published June 27, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. No source names a fixed version.
- Severity
- 7.8 HighCVSS 3.1, NVD
- Exploit chance
- 0.24%EPSS, 14th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
- autodesk alias
- autodesk autocad
- autodesk autocad advance steel
- autodesk autocad architecture
- autodesk autocad civil 3d
- autodesk autocad electrical
- autodesk autocad lt
- autodesk autocad map 3d
- autodesk autocad mechanical
- autodesk autocad mep
- autodesk autocad plant 3d
- autodesk infraworks
Show 5 moreShow less
What each source reports
NVD Score used
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
- Record
CVE-2023-29068- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE ListNo score
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
- Record
CVE-2023-29068- Updated
- 2026-11-02
EUVDEUVD-2023-32671No score
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
- Record
EUVD-2023-32671- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fw27-7fvf-jgxv
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption...
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
- Record
GHSA-fw27-7fvf-jgxv- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.