Autodesk 3ds Max Out-of-Bounds Write Vulnerability Allowing Memory Corruption and Arbitrary Code Execution

An out-of-bounds write vulnerability has been identified in Autodesk 3ds Max 2026, which can be triggered by a maliciously crafted RBG file. When this file is parsed in 3ds Max, it can lead to memory corruption, causing the application to crash, corrupt data, or execute arbitrary code within the current process.

Impact

Exploitation of this vulnerability can cause application crashes, data corruption, or allow for the execution of arbitrary code in the context of the current process.

Remediation

Users are advised to update to Autodesk 3ds Max version 2026.2, available through the Autodesk Access or Accounts Portal.