High severity · published Oct 14, 2022
CVE-2022-41302
An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafted FBX files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
FBX SDK ·
2020.3.1 · source: vendor
FS
Fbx Software Development Kit · Autodesk
2020.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-41302
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-41302
Patch
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022
More from FBX SDK
7.8
CVE-2022-41303
A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the application to reference a…
7.8
CVE-2022-41304
An Out-Of-Bounds Write Vulnerability in Autodesk FBX SDK 2020 version and prior may lead to code execution through maliciously crafted FBX files or information disclosure