Skip to content
OpenAdvisories
High · 7.8 CVE-2024-23139 EUVD-2024-20658GHSA-mfrg-mc7h-8xrw

ActionScript Byte Code “ABC” Vulnerability in the Autodesk FBX Review software

Published Mar 17, 2024 · Updated Aug 26, 2025 · Assigned by autodesk

Description

A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Affected products

VendorProductAffectedFixed
Autodesk FBX Review 1.5.3.0 – < 1.5.4.0 1.5.4.0

References