PT-2022-25803 · Autodesk · Autodesk Fbx-Sdk

Published 2022-10-14 · Updated 2025-05-14 · CVE-2022-41302

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk FBX SDK versions prior to 2020.0

Description The issue is related to an Out-Of-Bounds Read Vulnerability that may lead to code execution or information disclosure through maliciously crafted FBX files. This vulnerability, when combined with other vulnerabilities, could potentially lead to code execution in the context of the current process.

Recommendations For Autodesk FBX SDK versions prior to 2020.0, update to version 2020.0 or later to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-41302

Affected Products

Autodesk Fbx-Sdk

References · 4

• https://autodesk.com/trust/security-advisories/adsk-sa-2022-0022 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41302 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41302 · Security Note
• https://t.me/cvenotify/122163 · Telegram Post