Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK
CVE-2022-41302

7.8HIGH

Key Information:

Vendor
Autodesk
Status
Fbx Sdk
Vendor
CVE Published:
14 October 2022

Summary

An Out-Of-Bounds Read vulnerability has been identified in the Autodesk FBX SDK versions 2020 and earlier. This flaw can be exploited through specially crafted FBX files, potentially leading to unauthorized code execution or sensitive information disclosure in the context of the currently running process. It is crucial for users to be aware of this risk, especially when handling untrusted FBX files.

Affected Version(s)

FBX SDK 2020.3.1

References

https://www.autodesk.com/trust/security-advisories/adsk-s...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.