CVE-2023-7298: 
Autodesk FBX SDK vulnerability analysis and mitigation

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. The vulnerability (CVE-2023-7298) was discovered in Autodesk FBX SDK versions 2020.3.4 or earlier and has been mitigated in versions 2020.3.5 or later. The vulnerability was initially disclosed on December 9, 2024 (Autodesk Advisory).

The vulnerability is classified as a medium severity issue that could allow an attacker to exploit an Out-of-Bounds Write condition when parsing FBX files through the Autodesk FBX SDK. The vulnerability requires user interaction to be exploited (Autodesk Advisory).

If successfully exploited, this vulnerability could allow an attacker to cause a crash, corrupt data, or execute arbitrary code in the context of the current process (Autodesk Advisory).

The vulnerability requires user interaction to be exploited, specifically through the parsing of a maliciously crafted FBX file. The vulnerability was reported by security researcher Daniel Wolfman (Autodesk Advisory).

Autodesk recommends that customers upgrade to version 2020.3.5 or later of the FBX SDK. As a general best practice, users should only open files from trusted sources (Autodesk Advisory).