CVE-2024-23139: ActionScript Byte Code “ABC” Vulnerability in the Autodesk FBX Review software

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-18 · updated 2026-06-17
Weakness: CWE-787

Description

A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Affected products

Autodesk FBX Review: 1.5.3

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0005
https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0005

Get alerted when CVE-2024-23139 or the next vulnerability affects your stack