PT-2022-6968 · Autodesk · Autodesk Fbx-Sdk

Published 2022-09-14 · Updated 2025-05-14 · CVE-2022-41303

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk FBX SDK version 2020

Description The issue is related to a use-after-free vulnerability that can be exploited by tricking a user into opening a malicious FBX file. This may cause the application to reference a memory location controlled by an unauthorized third party, allowing the execution of arbitrary code on the system. The vulnerability is associated with the improper use of memory after it has been freed, which can be exploited using a specially crafted FBX file.

Recommendations For Autodesk FBX SDK version 2020, consider avoiding the use of FBX files from untrusted sources until a patch is available. As a temporary workaround, restrict the ability to open FBX files in the application to minimize the risk of exploitation.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2023-05947

CVE-2022-41303

Affected Products

Autodesk Fbx-Sdk

References · 7

• https://osv.dev/vulnerability/CVE-2022-41303 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41303 · Security Note
• https://autodesk.com/trust/security-advisories/adsk-sa-2022-0022 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41303 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05947 · Security Note
• https://cybersecurity-help.cz/vdb/SB2023091321 · Note
• https://t.me/cvenotify/122164 · Telegram Post