CVE-2026-10709

7.8 Élevée

Publiée le 04/08/2026 à 15:17 · Modifiée le 24/10/2026 à 01:10 · Analysée par le NVD · Source : psirt@autodesk.com

Description

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Traduire en français

Produits concernés

Autodesk FBX SDK
Autodesk fbx software development kit

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.8 Élevée	psirt@autodesk.com	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-121

Références

https://www.autodesk.com/products/autodesk-access/overview Product
https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0010 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories