Skip to content
Sign in
7.8 High

CVE-2026-7454 A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability

Description

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products and versions

Product Affected versions Fixed in
3ds Max 2027 2027 → < 2027.1 2027.1
3ds Max 2026 2026 → < 2026.1 2026.1

Other CVEs of 3ds Max

The 23 CVEs of 3ds Max →
CVE-2026-19568 A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability 7.8 High CVE-2026-7455 A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability 7.8 High CVE-2026-16783 A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability 7.8 High CVE-2026-16782 A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability 5.3 Medium
Track this CVE