NetSight
medium5.3

CVE-2026-16782

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability.

Impact

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected products

VendorProductAffected versions
Autodesk3ds Max
from 2026 before 2026.3.4
from 2027 before 2027.2

Weakness classification

References