


A CVSS v3 base score of 7.1 has been calculated the CVSS vector string is ( AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H).Īn out-of-bounds write vulnerability in versions of Autodesk FBX SDK prior to version 2020 could result in code execution or information disclosure through maliciously crafted FBX files.ĬVE-2022-41304 has been assigned to this vulnerability. Exploitation of this vulnerability could cause the application to reference a memory location controlled by an unauthorized third party and run arbitrary code on the system.ĬVE-2022-41303 has been assigned to this vulnerability. Once opened, a maliciously crafted FBX file could leverage a use-after-free vulnerability in versions of Autodesk FBX SDK prior to version 2020. A CVSS v3 base score of 7.8 has been calculated the CVSS vector string is ( AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). This vulnerability, if exploited alongside other vulnerabilities, could also result in code execution in the context of the current process.ĬVE-2022-41302 has been assigned to this vulnerability. Autodesk FBX SDK versions 2020 and priorĪn out-of-bounds read vulnerability in versions of Autodesk FBX SDK prior to version 2020 could result in code execution or information disclosure through maliciously crafted FBX files.The following versions of the affected products are affected: Products using Autodesk FBX SDK software are affected by these vulnerabilities. Successful exploitation of these vulnerabilities could lead to code execution or a denial-of-service condition. Vulnerability: Out-of-bounds Read, Use After Free, Out-of-bounds Write.ATTENTION: Exploitable remotely/low attack complexity.
