HIGH

CVE-2026-10709

FBX BinaryReadSectionHeader Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK

CVSS v3

7.8

HIGH

EPSS Score

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Technical details

CVSS v3 Vector
3.1
Published
8/4/2026
Last Modified
8/4/2026

Frequently asked questions

What is CVE-2026-10709?

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Is CVE-2026-10709 actively exploited?

Active exploitation of CVE-2026-10709 has not been confirmed. The EPSS score is N/A%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-10709?

CVE-2026-10709 has a CVSS v3 base score of 7.8 (HIGH severity), with vector string 3.1.

Is CVE-2026-10709 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.