Skip to content
OpenAdvisories
High · 7.8 CVE-2026-7454 EUVD-2026-31915GHSA-rcgw-6xcq-f735

WRL File Parsing Memory Corruption in Autodesk 3ds Max

Published May 26, 2026 · Updated May 27, 2026 · Assigned by autodesk

Description

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products

VendorProductAffectedFixed
Autodesk 3ds Max 2027 – < 2027.1, 2026 – < 2026.1 2027.1

Advisories 1

References