Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Autodesk 3ds Max ausnutzen, um beliebigen Programmcode auszuführen, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
Product
Autodesk 3ds Max ist eine 3D-Modellierungs-, Animations- und Rendering-Software.
Vulnerabilities 2
-
High 7.8
JPG File Parsing Out-of-Bounds Write Vulnerability
A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
-
High 7.8
DWG File Parsing Use-After-Free Vulnerability
A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current pr…
Revision history
-
#1
Initiale Fassung
References
-
Autodesk Security advisory vom 2025-11-12
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0023