Description
A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | FBX SDK | 2020.3.1 | — |
Advisories 2
- WID-SEC-2023-2325 Microsoft 3D Builder und Viewer: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 12, 2023
- ICSA-23-073-02 Autodesk FBX SDK CISA ICS & IT advisories · Mar 29, 2023