What is CVE-2022-25794?

CVE-2022-25794 is a high-severity vulnerability in Autodesk Fbx_review, classified under Out-of-bounds Read. CVSS score: 7.8/10. Published 2022-04-11.

How severe is CVE-2022-25794?

High severity. CVSS v3 base score is 7.8 out of 10.

Out-of-bounds Read in Autodesk Fbx_review

CVE-2022-25794

An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash comp…

Vulnerability class: Buffer Overflow

EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Autodesk Fbx_review
N/a Autodesk Fbx Review — versions 1.5.2

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

psirt@autodesk.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-25794?: CVE-2022-25794 is a high-severity vulnerability in Autodesk Fbx_review, classified under Out-of-bounds Read. CVSS score: 7.8/10. Published 2022-04-11.
How severe is CVE-2022-25794?: High severity. CVSS v3 base score is 7.8 out of 10.