Description (CNA)
A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Autodesk / FBX SDK | affected 2020.3.9 before 2020.3.10 |
CWE
CWE-121
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0010
- https://www.autodesk.com/products/autodesk-access/overview
ADP enrichment
No English description supplied.
No references supplied.