CVE-2016-9305
CriticalSummary
Improper handling in the Autodesk FBX-SDK before version 2017.1 regarding type mismatches and previously deleted objects related to reading and converting malformed FBX format files can allow attackers to gain access to uninitialized pointers.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to memory, posing a risk of data leakage or execution of malicious code.
Recommendation
It is recommended to update Autodesk FBX-SDK to version 2017.1 or later to mitigate this vulnerability.
Other vulnerabilities in Autodesk FBX-SDK
See all- CVE-2016-9304High
Multiple buffer overflows in Autodesk FBX-SDK before version 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DFX format files.
- CVE-2016-9307Critical
Multiple buffer overflows in Autodesk FBX-SDK before version 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed 3DS format files.
- CVE-2016-9306Critical
Multiple buffer overflows in Autodesk FBX-SDK before version 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DAE format files.
- CVE-2016-9303Critical
Multiple buffer overflows in Autodesk FBX-SDK before version 2017.1 can allow attackers to execute arbitrary code or cause an infinite loop condition when reading or converting malformed FBX format files.
- CVE-2026-10710High
A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow in fbxsdk::ExtractDrive, allowing arbitrary code execution in the context of the current process.
- CVE-2026-10709High
A maliciously crafted FBX file parsed through Autodesk FBX SDK can trigger a stack-based buffer overflow in fbxsdk::FbxIO::BinaryReadSectionHeader.
Original NVD description (English source)
Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects related to reading and converting malformed FBX format files can allow attackers to gain access to uninitialized pointers.