CVE-2026-10710

Analyzed Analyzed - Analysis Complete

Stack-Based Buffer Overflow in Autodesk FBX SDK

Publication date: 2026-08-04

Last updated on: 2026-09-04

Assigner: Autodesk

Description

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-09-04

Generated

2026-09-13

AI Q&A

2026-08-04

EPSS Evaluated

2026-09-12

NVD

CVE-2026-10710

EUVD

EUVD-2026-52670

Affected Vendors & Products

Vendor	Product	Version / Range
autodesk	fbx_software_development_kit	to 2020.3.10 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a stack-based buffer overflow in Autodesk FBX SDK's fbxsdk::ExtractDrive function. It occurs when parsing a maliciously crafted FBX file, allowing an attacker to execute arbitrary code in the current process context.

Detection Guidance

Detecting this vulnerability requires inspecting Autodesk FBX SDK versions and analyzing FBX files for malformed data. Check installed SDK versions using package managers or Autodesk tools. Scan FBX files with tools like strings or hex editors for unusual patterns. Monitor processes for crashes when parsing FBX files.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your system, potentially leading to data theft, system damage, or unauthorized access. It requires user interaction to open a specially crafted FBX file.

Compliance Impact

This vulnerability could lead to arbitrary code execution, potentially allowing unauthorized access to sensitive data. For GDPR, this may result in data breaches requiring notification under Article 33. For HIPAA, it could compromise protected health information, violating the Security Rule. The impact depends on the system's data handling and security controls.

Mitigation Strategies

Update Autodesk FBX SDK to the latest version as soon as possible to patch the stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive.

Hi! I’m here to help you understand CVE-2026-10710. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70