CVE-2026-7454

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

high 7.8 CVSS 3.1
Published: May 26, 2026
Modified: May 26, 2026
Vendor: Autodesk
Product: 3Ds Max
Versions: 2026,2027

Description

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

References

Related CVEs