CVE-2026-0661

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Score

CVSS 3.1 8.4 High

Status

Modified - psirt@autodesk.com

Published

2026-02-04

Last modified

2026-06-03

Weaknesses

CWE-787

Affected products

• 3ds Max (Autodesk)

References

• https://www.autodesk.com/products/autodesk-access/overview
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002