Autodesk Fbx Software Development Kit vulnerabilities

21 CVEs affecting Autodesk Fbx Software Development Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-10710, published 2026-08-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-9303, published 2017-01-25. Critical severity, CVSS 9.8. EPSS: 4.1% chance of exploitation in the next 30 days. Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code or cause an infinite loop condition when reading or converting malformed FBX format files.
CVE-2016-9307, published 2017-01-25. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed 3DS format files.
CVE-2016-9306, published 2017-01-25. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DAE format files.
CVE-2020-7082, published 2020-04-17. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. A use-after-free vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to code execution on a system running it.
CVE-2016-9304, published 2017-01-25. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DFX format files.
CVE-2020-7081, published 2020-04-17. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitary code read/write on the system running it.
CVE-2020-7085, published 2020-04-17. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. A heap overflow vulnerability in the Autodesk FBX-SDK versions 2019.2 and earlier may lead to arbitrary code execution on a system running it.
CVE-2020-7080, published 2020-04-17. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitrary code execution on a system running it.
CVE-2016-9305, published 2017-01-25. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects related to reading and converting malformed FBX format files can allow attackers to gain…
CVE-2020-7083, published 2020-04-17. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. An intager overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of service of the application.

Latest

CVE-2026-10710, published 2026-08-04. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this…
CVE-2026-10709, published 2026-08-04. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage…
CVE-2023-7298, published 2024-12-09. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data…
CVE-2023-27911, published 2023-04-17. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.
CVE-2023-27910, published 2023-04-17. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.
CVE-2023-27909, published 2023-04-17. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through maliciously crafted FBX files or information disclosure.
CVE-2022-41304, published 2022-10-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. An Out-Of-Bounds Write Vulnerability in Autodesk FBX SDK 2020 version and prior may lead to code execution through maliciously crafted FBX files or information disclosure.
CVE-2022-41303, published 2022-10-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the application to reference a memory location…
CVE-2022-41302, published 2022-10-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafted FBX files. This vulnerability in…