Autodesk 3ds Max Use-After-Free Vulnerability Allowing Code Execution

A use-after-free vulnerability has been identified in Autodesk 3ds Max 2026. When a maliciously crafted DWG file is parsed by the application, it can trigger this vulnerability. Exploitation of this issue can lead to application crashes, unauthorized access to sensitive data, or arbitrary code execution within the current process context.

Impact

Exploitation of this vulnerability can cause application crashes, unauthorized access to sensitive data, or allow arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to Autodesk 3ds Max version 2026.3. The update can be obtained through Autodesk Access or the Accounts Portal.