CVE-2026-16782: SVG File Parsing Out-of-Bounds Read Vulnerability in Autodesk 3ds Max
Published Aug 24, 2026
·Updated
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Affected Software
1 affected component
Autodesk 3ds Max
Event History
Aug 24, 2026
CVE Published
via MITRE·08:56 PM
Data Sourced
via MITRE·08:56 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
The CVSS vector indicates that exploitation requires no privileges and no user interaction, with low attack complexity. The malicious SVG must be parsed through Autodesk 3ds Max to trigger the issue.