Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 35

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00211 Published 2026-02-04 Fixed in 2026.3.2 CWE-787
Priority LOW 35

A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00204 Published 2026-02-04 Fixed in 2026.3.2 CWE-426
Priority LOW 38

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00213 Published 2026-02-04 Fixed in 2026.3.2 CWE-121
TI-2026-00455 CVE-2026-0661 · GHSA-gqqf-v25p-495h

Out-of-Bounds Write in RGB File Parsing

Priority LOW 38

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00192 Published 2026-02-04 Fixed in 2026.3.2 CWE-787
TI-2026-00340 CVE-2026-0537 · GHSA-7pw6-2xv6-25xh

RGB File Parsing Memory Corruption

Priority LOW 38

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00192 Published 2026-02-04 Fixed in 2026.3.2 CWE-787
TI-2026-00341 CVE-2026-0538 · GHSA-7fpf-2ppc-w2v7

GIF File Parsing Out-of-Bounds Write

Priority LOW 38

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00192 Published 2026-02-04 Fixed in 2026.3.2 CWE-787