CVE-2026-16781Medium· 5.5▾ SunlitA maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.1%
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service.
3ds_max >= 2026, < 2026.3.43ds_max >= 2027, < 2027.2Upgrade past the affected range:
3ds_max 2027.2Connected by shared product, vendor, weakness, or advisory.
CVE-2026-7455High· 7.8A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability
CVE-2026-16783High· 7.8A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability
CVE-2026-19568High· 7.8A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability
CVE-2026-16782Medium· 5.3A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability
CVE-2025-8892High· 7.8A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability
CVE-2025-9458High· 7.8A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability