AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AutodeskCVE-2026-10709

Autodesk FBX SDK: stack buffer overflow

Autodesk

CVE-2026-10709 · Published Aug 4, 2026 · updated Sep 4, 2026

High7.8
Fix: upgrade to 2020.3.10 or later
Autodesk advisory

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected versions

PackageAffectedFixed in
FBX SDK
Product
>= 2020.3.9, < 2020.3.102020.3.10
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-121

More Autodesk advisories

All Autodesk
High 7.8Aug 6Autodesk Revit: out-of-bounds writeCVE-2026-8325fixed in 2027.2.0 +3High 7.8Aug 6Autodesk AutoCAD: code executionCVE-2026-7406fixed in Revit 2027.1.0 +4Medium 5.5Aug 6Autodesk AutoCAD: out-of-bounds readCVE-2026-7405fixed in Revit 2027.1.0 +4High 7.8Aug 6Autodesk AutoCAD: use after freeCVE-2026-1289fixed in Revit 2027.2.0 +5High 7.8Aug 6Autodesk AutoCAD: out-of-bounds readCVE-2026-11803fixed in Revit 2027.2.0 +5High 7.8Aug 4Autodesk FBX SDK: stack buffer overflowCVE-2026-10710fixed in 2020.3.10