Lucene search
+L
AutodeskFbx Software Development Kit

19 matches found

CVE
CVE
added 2020/04/17 5:52 p.m.171 views

CVE-2020-7082

CVE-2020-7082 is a use-after-free vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier that may lead to code execution. The connected documents confirm the affected component (FBX-SDK) and the root cause (use-after-free) with the stated impact. No explicit remediation version or patc...

9.3CVSS8.7AI score0.02037EPSS
CVE
CVE
added 2020/04/17 5:52 p.m.167 views

CVE-2020-7080

Summary: CVE-2020-7080 is a buffer overflow vulnerability in the Autodesk FBX-SDK library, affecting versions 2019.0 and earlier. The underlying issue can lead to arbitrary code execution on a system running the affected SDK. Affected component: Autodesk FBX-SDK (library used for FBX content proc...

9.3CVSS8.2AI score0.01394EPSS
CVE
CVE
added 2020/04/17 5:52 p.m.167 views

CVE-2020-7081

Autodesk FBX-SDK is affected by CVE-2020-7081 (type confusion) in versions prior to 2019.5 according to connected sources. The underlying issue is a type confusion in the FBX-SDK that can lead to arbitrary code read/write on the host system. Real-world exploitation details are not provided in the...

9.3CVSS8.6AI score0.01452EPSS
CVE
CVE
added 2020/04/17 5:53 p.m.167 views

CVE-2020-7085

CVE-2020-7085 affects Autodesk FBX-SDK versions 2019.2 and earlier (per NVD) and is demonstrated to enable arbitrary code execution via a heap overflow in the FBX parser. Nessus/NASL entries indicate the issue extends to FBX-SDK

9.3CVSS8.2AI score0.01394EPSS
CVE
CVE
added 2020/04/17 5:53 p.m.159 views

CVE-2020-7083

CVE-2020-7083 : The Autodesk FBX-SDK vulnerability affects versions prior to 2019.5, where an integer overflow may cause the application to crash (DoS). The connected sources confirm the root cause is an integer overflow in FBX-SDK and list affected versions (≤2019.0/≤2019.4) with mitigation via ...

6.5CVSS6.8AI score0.01009EPSS
CVE
CVE
added 2020/04/17 5:53 p.m.154 views

CVE-2020-7084

The CVE-2020-7084 issue affects the Autodesk FBX-SDK library prior to (and including) 2019.x; multiple sources describe a NULL pointer dereference in the FBX SDK that can lead to application denial of service. The Nessus/OpenVAS entries specify the vulnerable range as FBX-SDK versions

5.5CVSS5.9AI score0.00754EPSS
CVE
CVE
added 2023/04/17 12:0 a.m.148 views

CVE-2023-27909

CVE-2023-27909 is an Out-Of-Bounds Write vulnerability in Autodesk FBX SDK 2020 or prior that can lead to code execution or information disclosure when processing crafted FBX files. Public documentation links this CVE to Microsoft Visual Studio updates and accompanying MSRC advisories, indicating...

7.8CVSS7.5AI score0.00491EPSS
CVE
CVE
added 2023/04/17 12:0 a.m.144 views

CVE-2023-27911

CVE-2023-27911 concerns Autodesk FBX SDK 2020 and earlier. The vulnerability is a heap buffer overflow in the FBX processing code that can lead to code execution. Connected documents confirm this is a FBX SDK issue, with references noting a heap overflow/remote code execution vector for Autodesk ...

7.8CVSS7.9AI score0.00643EPSS
CVE
CVE
added 2023/04/17 12:0 a.m.125 views

CVE-2023-27910

CVE-2023-27910 concerns a stack/heap-related overflow in Autodesk FBX SDK 2020 and earlier that can allow code execution when a user opens a malicious FBX file. Publicly reported data describe the flaw as a stack buffer overflow exploitable via a crafted FBX, with the CVSS indicating local access...

7.8CVSS7.9AI score0.00529EPSS
CVE
CVE
added 2022/10/14 12:0 a.m.119 views

CVE-2022-41303

The CVE-2022-41303 entry concerns Autodesk FBX SDK 2020 or prior, where a use-after-free vulnerability could let a malicious FBX file cause the application to reference a memory location controlled by an attacker and run arbitrary code. Public sources in connected documents confirm the affected c...

7.8CVSS7.7AI score0.00351EPSS
CVE
CVE
added 2022/10/14 12:0 a.m.69 views

CVE-2022-41302

CVE-2022-41302 is an Out-of-Bounds Read vulnerability in Autodesk FBX SDK versions prior to 2020. It can lead to code execution or information disclosure when processing malicious FBX files, and could enable code execution in the context of the current process when combined with other vulnerabili...

7.8CVSS7.5AI score0.00278EPSS
CVE
CVE
added 2022/10/14 12:0 a.m.64 views

CVE-2022-41304

CVE-2022-41304 concerns Autodesk FBX SDK versions prior to 2020, featuring an out-of-bounds write vulnerability that can lead to code execution or information disclosure when processing malicious FBX files. The linked materials confirm the affected product/version scope and indicate a remediation...

7.8CVSS7.5AI score0.00312EPSS
CVE
CVE
added 2024/12/09 3:9 p.m.58 views

CVE-2023-7298

CVE-2023-7298 concerns Autodesk FBX SDK. A crafted FBX file can trigger an Out-of-Bounds Write in the FBX parser, enabling a attacker to crash the process, corrupt data, or potentially execute arbitrary code in the affected product. Documented impacts include crash, data integrity risks, and remo...

8.8CVSS7.5AI score0.00312EPSS
CVE
CVE
added 2017/01/25 7:0 p.m.48 views

CVE-2016-9303

CVE-2016-9303 affects Autodesk FBX-SDK. The vulnerability arises from multiple buffer overflows in FBX-SDK before 2017.1, enabling an attacker to execute arbitrary code or trigger an infinite loop when reading or converting malformed FBX files. Affected component: FBX-SDK (Autodesk). Root cause d...

9.8CVSS9.7AI score0.04117EPSS
CVE
CVE
added 2017/01/25 7:0 p.m.45 views

CVE-2016-9305

The CVE 2016-9305 entry concerns Autodesk FBX-SDK prior to 2017.1 where improper handling of type mismatches and deleted objects while reading/converting malformed FBX files can lead to access to uninitialized pointers. This vulnerability is described across multiple sources (including CNVD and N...

9.8CVSS9.5AI score0.01214EPSS
CVE
CVE
added 2019/12/03 5:9 p.m.45 views

CVE-2019-7366

CVE-2019-7366 is a reported buffer overflow in the Autodesk FBX Software Development Kit (SDK) 2019.5 . Multiple connected sources (e.g., Red Hat CVE entry, CNVD, NVD) describe that a user opening a crafted FBX file can trigger an overflow, potentially allowing arbitrary code execution. The docum...

9.3CVSS7.8AI score0.0088EPSS
CVE
CVE
added 2017/01/25 7:0 p.m.44 views

CVE-2016-9304

CVE-2016-9304 affects Autodesk FBX-SDK prior to 2017.1, where multiple buffer overflows in the library can allow an attacker to execute arbitrary code when reading or converting malformed DFX format files. The vulnerability stems from improper handling of malformed inputs in the FBX-SDK, leading ...

8.8CVSS8.9AI score0.0185EPSS
CVE
CVE
added 2017/01/25 7:0 p.m.44 views

CVE-2016-9306

Autodesk FBX-SDK is affected by CVE-2016-9306: multiple buffer overflows in the FBX-SDK prior to 2017.1. The vulnerability arises when reading or converting malformed DAE files, enabling arbitrary code execution. Affected component: Autodesk FBX-SDK (pre-2017.1); damage scope includes potential r...

9.8CVSS9.7AI score0.02194EPSS
CVE
CVE
added 2017/01/25 7:0 p.m.42 views

CVE-2016-9307

Autodesk FBX-SDK contains a buffer overflow vulnerability (CVE-2016-9307) affecting 2017.0 and earlier versions, identified as prior to 2017.1. When reading or converting malformed 3DS format files, attackers could trigger a buffer overflow and potentially execute arbitrary code. The CVE is docum...

9.8CVSS9.7AI score0.02194EPSS