Description
A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Autodesk | FBX SDK | unaffected |
|
No data.
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Tue, 04 Aug 2026 13:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. | |
| Title | FBX ExtractDrive Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK | |
| First Time appeared |
Autodesk
Autodesk fbx Sdk |
|
| Weaknesses | CWE-121 | |
| CPEs | cpe:2.3:a:autodesk:fbx_sdk:2020.3.9:*:*:*:*:*:*:* | |
| Vendors & Products |
Autodesk
Autodesk fbx Sdk |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: autodesk
Published:
Updated: 2026-08-04T12:59:51.310Z
Reserved: 2026-06-02T18:11:05.634Z
Link: CVE-2026-10710
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
-
CWE-121
Stack-based Buffer Overflow