What is CVE-2022-41302?

CVE-2022-41302 is a high-severity vulnerability in Autodesk Fbx_software_development_kit, classified under Out-of-bounds Read. CVSS score: 7.8/10. Published 2022-10-14.

How severe is CVE-2022-41302?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2022-41302 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Out-of-bounds Read in Autodesk Fbx_software_development_kit

CVE-2022-41302

An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafted FBX files. This vulnerability in conjunction with other vulnerabilities could…

Vulnerability class: Buffer Overflow

EPSS: 0.003 (19.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Autodesk Fbx_software_development_kit — versions 2020.0
N/a Fbx Sdk — versions 2020.3.1

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

Public proof-of-concept exploits

Live-Hack-CVE/CVE-2022-41302

References

psirt@autodesk.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-41302?: CVE-2022-41302 is a high-severity vulnerability in Autodesk Fbx_software_development_kit, classified under Out-of-bounds Read. CVSS score: 7.8/10. Published 2022-10-14.
How severe is CVE-2022-41302?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2022-41302 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.