HIGH

CVE-2026-10710

FBX ExtractDrive Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK

CVSS v3

7.8

HIGH

EPSS Score

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Technical details

CVSS v3 Vector
3.1
Published
8/4/2026
Last Modified
8/4/2026

Frequently asked questions

What is CVE-2026-10710?

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Is CVE-2026-10710 actively exploited?

Active exploitation of CVE-2026-10710 has not been confirmed. The EPSS score is N/A%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-10710?

CVE-2026-10710 has a CVSS v3 base score of 7.8 (HIGH severity), with vector string 3.1.

Is CVE-2026-10710 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.