Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects related to reading and converting malformed FBX format files can allow attackers to gain access to uninitialized pointers.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAutodesk Fbx Software Development Kit
APPAutodesk≤ 2017.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2016-9303CRITICAL9.8PL ✓same product
Wielokrotny buffer overflow w Autodesk FBX-SDK umożliwiający RCE
CVE-2016-9306CRITICAL9.8PL ✓same product
Wielokrotny buffer overflow w Autodesk FBX-SDK przy plikach DAE
CVE-2016-9307CRITICAL9.8PL ✓same product
Buffer overflow w Autodesk FBX-SDK podczas przetwarzania plików 3DS
CVE-2023-27909HIGH7.8same product
An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution th...
CVE-2023-27910HIGH7.8same product
A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability...