AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AutodeskCVE-2026-19568

Autodesk 3ds Max: memory corruption

Autodesk

CVE-2026-19568 · Published Aug 24, 2026 · updated Aug 28, 2026

High7.8
Fix: upgrade to 2027.2.0 or later (2 fixed versions below)
Autodesk advisory

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected versions

PackageAffectedFixed in
3ds Max
Product
>= 2027.0.0, < 2027.2.02027.2.0
>= 2026.0.0, < 2026.3.42026.3.4
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-120

More Autodesk advisories

All Autodesk
Medium 5.5Sep 2Autodesk Shared Components: denial of serviceCVE-2026-14255fixed in 1.12.0 +4High 7.8Aug 24Autodesk 3ds Max: out-of-bounds writeCVE-2026-7455fixed in 2027.2.0 +1High 7.8Aug 24Autodesk 3ds Max: out-of-bounds writeCVE-2026-16783fixed in 2027.2.0 +1Medium 5.5Aug 24Autodesk 3ds Max: denial of serviceCVE-2026-16781fixed in 2027.2.0 +1Medium 5.3Aug 24Autodesk 3ds Max: out-of-bounds readCVE-2026-16782fixed in 2027.2.0 +1High 7.8Aug 12Autodesk Installer: insecure permissionsCVE-2026-14478fixed in 2.23.0