CVE-2022-41302

EPSS 0.11%
Veröffentlicht 14.10.2022 17:15:16
Zuletzt bearbeitet 14.05.2025 16:15:22
Quelle psirt@autodesk.com
CVE-Watchlists
Login
Unerledigt
Login

An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafted FBX files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Autodesk ≫ Fbx Software Development Kit Version2020.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.11%	0.299

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-41302

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-41302

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-41302

EUVD