Nemetschek's vulnerability footprint centers on Cinema 4D, a widely used 3D modeling and animation platform that processes complex file formats and maintains substantial native codebases. The durable pattern of disclosures involves memory-safety issues—out-of-bounds writes, use-after-free conditions, and stack-based buffer overflows—that arise from the demands of handling untrusted 3D assets and rendering operations. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Nemetschek over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-40482HIGH Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installat | May 3, 2024 | 7.8 | 23 | NO | NO |
CVE-2024-25423HIGH An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitrary code via a crafted c4d_base.xdl64 file. | Feb 22, 2024 | 7.0 | 23 | NO | NO |
CVE-2023-40490HIGH Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations | May 7, 2024 | 7.8 | 22 | NO | NO |
CVE-2023-40488HIGH Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations | May 3, 2024 | 7.8 | 22 | NO | NO |
CVE-2023-40486HIGH Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i | May 3, 2024 | 7.8 | 22 | NO | NO |
CVE-2023-40485HIGH Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i | May 3, 2024 | 7.8 | 22 | NO | NO |
CVE-2023-40484HIGH Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i | May 3, 2024 | 7.8 | 22 | NO | NO |
CVE-2023-40483HIGH Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installat | May 3, 2024 | 7.8 | 22 | NO | NO |
CVE-2023-40489HIGH Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations | May 3, 2024 | 7.8 | 21 | NO | NO |
CVE-2023-40487HIGH Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations | May 3, 2024 | 7.8 | 21 | NO | NO |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Nemetschek.
Media articles that mention a CVE ID that affects a product developed by Nemetschek — matched by CVE ID, not by vendor name.