AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AutodeskCVE-2026-16782

Autodesk 3ds Max: out-of-bounds read

Autodesk

CVE-2026-16782 · Published Aug 24, 2026 · updated Aug 28, 2026

Medium5.3
Fix: upgrade to 2027.2.0 or later (2 fixed versions below)
Autodesk advisory

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected versions

PackageAffectedFixed in
3ds Max
Product
>= 2027.0.0, < 2027.2.02027.2.0
>= 2026.0.0, < 2026.3.42026.3.4
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-125

More Autodesk advisories

All Autodesk
Medium 5.5Sep 2Autodesk Shared Components: denial of serviceCVE-2026-14255fixed in 1.12.0 +4High 7.8Aug 24Autodesk 3ds Max: out-of-bounds writeCVE-2026-7455fixed in 2027.2.0 +1High 7.8Aug 24Autodesk 3ds Max: out-of-bounds writeCVE-2026-16783fixed in 2027.2.0 +1High 7.8Aug 24Autodesk 3ds Max: memory corruptionCVE-2026-19568fixed in 2027.2.0 +1Medium 5.5Aug 24Autodesk 3ds Max: denial of serviceCVE-2026-16781fixed in 2027.2.0 +1High 7.8Aug 12Autodesk Installer: insecure permissionsCVE-2026-14478fixed in 2.23.0