CVE-2024-25423 is a local code execution vulnerability in MAXON CINEMA 4D version 2024.2.0. It arises from improper handling of a crafted c4d_base.xdl64 file, enabling a local attacker to execute arbitrary code. The vulnerability is categorized as CWE-787, indicating an out-of-bounds write condition. The CVSS 3.1 vector indicates that exploitation requires local access (AV:L), high attack complexity (AC:H), no privileges (PR:N), and user interaction (UI:R). The impact includes high confidentiality, integrity, and availability consequences. No known exploits in the wild or patch information are currently available.

Successful exploitation allows a local attacker to execute arbitrary code on the affected system, potentially leading to full compromise of the application and underlying system. The CVSS score of 7 reflects high impact on confidentiality, integrity, and availability. However, exploitation requires local access and user interaction, which limits remote exploitation scenarios.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and avoid opening untrusted c4d_base.xdl64 files. Monitor vendor communications for updates on patches or mitigations.