CVE-2022-41302

{"id": "CVE-2022-41302", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-10-14T17:15:16.100", "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@autodesk.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafted FBX files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process."}, {"lang": "es", "value": "Una vulnerabilidad de lectura fuera de l\u00edmites en Autodesk FBX SDK versi\u00f3n 2020. y anteriores puede conllevar a una ejecuci\u00f3n de c\u00f3digo o una divulgaci\u00f3n de informaci\u00f3n mediante archivos FBX dise\u00f1ados de forma maliciosa. Esta vulnerabilidad, junto con otras, podr\u00eda conllevar a una ejecuci\u00f3n de c\u00f3digo en el contexto del proceso actual"}], "lastModified": "2022-10-19T05:49:57.263", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:fbx_software_development_kit:2020.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8805EE28-F361-482B-81FC-4E31F2EDB85D"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@autodesk.com"}