Skip to content
OpenAdvisories
Medium WID-SEC-2026-0320 7 CVEs

Autodesk 3ds Max: Mehrere Schwachstellen ermöglichen Codeausführung

Published Feb 4, 2026 · Updated Feb 5, 2026 · Revision 2 · de-DE

Vendor: Autodesk Product: 3ds Max Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Autodesk 3ds Max ausnutzen, um beliebigen Programmcode auszuführen.

Product

Autodesk 3ds Max ist eine 3D-Modellierungs-, Animations- und Rendering-Software.

Vulnerabilities 7

  • High 8.4
    CVE-2026-0537

    RGB File Parsing Memory Corruption

    A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    Autodesk 3ds Max
  • High 8.4
    CVE-2026-0538

    GIF File Parsing Out-of-Bounds Write

    A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    Autodesk 3ds Max
  • High 8.4
    CVE-2026-0660

    Stack Based Buffer Overflow in GIF File Parsing

    A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    Autodesk 3ds Max
  • High 8.4
    CVE-2026-0661

    Out-of-Bounds Write in RGB File Parsing

    A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    Autodesk 3ds Max
  • High 7.8
    CVE-2026-0536

    GIF File Parsing Stack Based Buffer Overflow

    A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    Autodesk 3ds Max
  • High 7.8
    CVE-2026-0659

    USD File Parsing Out-of-Bounds Write Vulnerability

    A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    Autodesk 3ds Max Arnold USD for Arnold
  • High 7.8
    CVE-2026-0662

    Untrusted Search Path Vulnerability when opening max Files

    A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized.

    Autodesk 3ds Max

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-5412

  2. #1

    Initiale Fassung

References