Malicious FBX File May Cause Out-of-Bounds Write, Crash, Data Corruption, or Arbitrary Code Execution Vulnerability
CVE-2023-7298

8.8HIGH

Key Information:

Vendor
Autodesk
Vendor
CVE Published:
9 December 2024

Summary

A security vulnerability exists in Autodesk FBX SDK that arises from the improper handling of maliciously crafted FBX files. When such files are processed, they can trigger an out-of-bounds write condition. This flaw can potentially lead to application crashes, corruption of data, or execution of arbitrary code within the context of the affected process. It is crucial for users of Autodesk FBX SDK to implement mitigations and keep their software updated to safeguard against potential exploitations stemming from this vulnerability.

Affected Version(s)

Autodesk FBX SDK 2020.3.4

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.