← Back to search

CVE-2026-10710

7.8 HIGH

Published 2026-08-04 · Updated 2026-08-05

AI risk analysis

Summary
A stack-based buffer overflow vulnerability in the Autodesk FBX SDK allows attackers to execute arbitrary code by parsing a maliciously crafted FBX file.
Exploitability
Exploitation requires the target to process a specially crafted FBX file, which may be difficult to achieve without control over the file source.
Blast radius
If exploited, this vulnerability could lead to full compromise of the affected system, including execution of arbitrary code with the privileges of the process.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the latest version of the Autodesk FBX SDK as soon as possible.
rcefbxautodeskbuffer-overflow

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-121

References

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.