Skip to content
OpenAdvisories
High · 8.4 CVE-2026-0537 EUVD-2026-5395GHSA-7pw6-2xv6-25xh

RGB File Parsing Memory Corruption

Published Feb 4, 2026 · Updated Jun 3, 2026 · Assigned by autodesk

Description

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products

VendorProductAffectedFixed
Autodesk 3ds Max 2026 – < 2026.3.2 2026.3.2

Advisories 1

References