Autodesk 3ds Max Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in Autodesk 3ds Max 2026. When the application parses a maliciously crafted GIF file, it can lead to memory corruption, allowing for arbitrary code execution in the context of the current process. This vulnerability requires user interaction to exploit.

Impact

Exploitation of this vulnerability can lead to arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to Autodesk 3ds Max 2026.3.2, available through the Autodesk Access application or the Accounts Portal. As a general best practice, only open files from trusted sources.