← Back to search

CVE-2026-10709

7.8 HIGH

Published 2026-08-04 · Updated 2026-08-05

AI risk analysis

Summary
This vulnerability allows a stack-based buffer overflow when parsing a maliciously crafted FBX file, enabling an attacker to execute arbitrary code.
Exploitability
Exploitation requires a user to open a maliciously crafted FBX file, which is relatively easy given the context of file handling in applications.
Blast radius
If exploited, this could lead to full control over the affected system, including data theft, system compromise, and further attacks.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Disable the feature that handles FBX file parsing until a patch is available, or upgrade to the latest version of the affected software.
rcefile-handlingbuffer-overflow

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-121

References

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.