A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/products/autodesk-access/overview | Product |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002 | Vendor Advisory |
Configurations
History
06 Feb 2026, 17:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Autodesk 3ds Max
Autodesk |
|
| CPE | cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:* | |
| References | () https://www.autodesk.com/products/autodesk-access/overview - Product | |
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002 - Vendor Advisory |
04 Feb 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-04 17:16
Updated : 2026-02-06 17:49
NVD link : CVE-2026-0537
Mitre link : CVE-2026-0537
CVE.ORG link : CVE-2026-0537
JSON object : View
Products Affected
autodesk
- 3ds_max
CWE
CWE-787
Out-of-bounds Write