CVE-2026-7454

Published: May 26, 2026Modified: Jul 24, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: psirt@autodesk.com (Secondary)

Description

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected (2)

Products: Autodesk: 3ds Max

Autodesk

1 product

3ds Max

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Autodesk 3ds Max	Version 2026
Autodesk 3ds Max	Version 2027

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://www.autodesk.com/products/autodesk-access/overview

Source: psirt@autodesk.com

Product

https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0006

Source: psirt@autodesk.com

Vendor Advisory

Timeline

No history available yet.