CVE-2026-10710

HIGH

Autodesk FBX SDK < 2020.3.10 - ExtractDrive Stack Buffer Overflow

Title source: manual
STIX 2.1

Description

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0014
EPSS Percentile 4.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-121
Status published
Products (1)
Autodesk/FBX SDK 2020.3.9 - 2020.3.10
Published Aug 04, 2026
Tracked Since Aug 04, 2026