Use-After-Free Vulnerability in Autodesk FBX-SDK
CVE-2020-7082

8.8HIGH

Key Information:

Vendor

Autodesk
Status
Autodesk Fbx-sdk
Vendor
CVE Published:
17 April 2020

What is CVE-2020-7082?

A use-after-free vulnerability present in Autodesk FBX-SDK versions 2019.0 and earlier can potentially allow an attacker to execute arbitrary code on systems utilizing the affected library. This flaw arises due to improper management of memory addresses which, if exploited, could lead to unexpected behaviors and compromise the integrity of the affected systems. Users are advised to review Autodesk's security advisory for mitigation strategies.

Affected Version(s)

Autodesk FBX-SDK 2019.0 and earlier

References

https://www.autodesk.com/trust/security-advisories/adsk-s...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.