CVE-2026-19568: SVG File Parsing Memory Corruption Vulnerability in Autodesk 3ds Max
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Users of Autodesk 3ds Max are exposed when they parse a maliciously crafted SVG file. Exploitation occurs in the context of the current 3ds Max process.
What does an attacker need to exploit it?
An attacker needs a maliciously crafted SVG file to be parsed through Autodesk 3ds Max. The CVSS vector indicates local attack vector, no privileges required, and user interaction required.
What is the potential impact of successful exploitation?
A successful attack can cause memory corruption and allow arbitrary code execution in the context of the current process. The provided severity vector indicates high impact to confidentiality, integrity, and availability.