CVE-2022-25794
Last modified
CVE-2022-25794 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash compiler and contain executable code. EPSS estimates a 1.06% chance of exploitation in the next 30 days.
Description
An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash compiler and contain executable code. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Autodesk | Fbx Review | < 1.5.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-25794?
How severe is CVE-2022-25794?
How do I fix CVE-2022-25794?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-25789A maliciously crafted DWF, 3DS and DWFX files in Autodesk Au…7.8
- CVE-2022-2579A vulnerability, which was classified as problematic, was fo…5.4
- CVE-2022-25790A maliciously crafted DWF file in Autodesk AutoCAD 2022, 202…7.8
- CVE-2022-25791A Memory Corruption vulnerability for DWF and DWFX files in …7.8
- CVE-2022-25792A maliciously crafted DXF file in Autodesk AutoCAD 2022, 202…7.8
- CVE-2022-25793A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds …7.8
- CVE-2022-25795A Memory Corruption Vulnerability in Autodesk TrueView 2022 …7.8
- CVE-2022-25796A Double Free vulnerability allows remote malicious actors t…7.8
- CVE-2022-25797A maliciously crafted PDF file in Autodesk AutoCAD 2022, 202…7.8
- CVE-2022-25799An open redirect vulnerability exists in CERT/CC VINCE softw…6.1
- CVE-2022-2580Heap-based Buffer Overflow in GitHub repository vim/vim prio…7.8
- CVE-2022-25800Best Practical RT for Incident Response (RTIR) before 4.0.3 …9.1
Are you affected by CVE-2022-25794?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST