CVE-2016-9305

9.8 criticalEPSS 1.2%

Critical (9.8) in autodesk fbx software development kit. EPSS 1.2% chance of exploitation in the next 30 days.

Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects related to reading and converting malformed FBX format files can allow attackers to gain access to uninitialized pointers.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-19
Published: 2017-01-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

autodesk:fbx_software_development_kit

References

http://www.autodesk.com/trust/security-advisories/adsk-sa-2016-01
http://www.securityfocus.com/bid/95803
http://www.autodesk.com/trust/security-advisories/adsk-sa-2016-01
http://www.securityfocus.com/bid/95803

Check your stack JSON