Skip to content
OpenAdvisories
High · 8.4 CVE-2026-0661 EUVD-2026-5400GHSA-gqqf-v25p-495h

Out-of-Bounds Write in RGB File Parsing

Published Feb 4, 2026 · Updated Jun 3, 2026 · Assigned by autodesk

Description

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products

VendorProductAffectedFixed
Autodesk 3ds Max 2026 – < 2026.3.2 2026.3.2

Advisories 1

References