CVE-2026-10709 in FBX SDK

Sumário

de MITRE • 04/08/2026

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsável: Autodesk
• Reservar: 02/06/2026
• Divulgação: 04/08/2026
• Moderação: aceite
• Entrada: VDB-385820
• CPE: pronto
• CWE: CWE-120 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-10709
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10709
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-10709/