Autodesk Fbx Review vulnerabilities

9 CVEs affecting Autodesk Fbx Review, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-23139, published 2024-03-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-27030, published 2021-04-19. High severity, CVSS 7.8. EPSS: 59.6% chance of exploitation in the next 30 days. A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s Review causing it to run arbitrary code on the system.
CVE-2021-27028, published 2021-04-19. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files.
CVE-2021-27027, published 2021-04-19. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure.
CVE-2021-27031, published 2021-04-19. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an…
CVE-2021-27044, published 2021-09-15. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through maliciously crafted DLL files or information disclosure.
CVE-2022-25794, published 2022-04-11. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure.…
CVE-2021-27029, published 2021-04-19. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review version 1.5.0 and prior causing the application to crash leading…
CVE-2021-40157, published 2021-09-15. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. A user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer Dereference vulnerability in FBX’s Review version 1.5.0 and prior causing it to run arbitrary code on…
CVE-2024-23139, published 2024-03-18. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data…