Approved changes feed: RSS · Atom

cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAutodesk (63e0b459-a294-5304-99c8-fcb7d9c8113e)
Product3Ds Max (b2e890d1-76b1-54a8-ae14-2981c0494720)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0662 vulnerable 2026-06-08 07:47:12.865623 Untrusted Search Path Vulnerability when opening max Files
HIGH (7.8)
A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized.
Published: 2026-02-04T16:28:31.980Z
Updated: 2026-02-26T15:04:19.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0661 vulnerable 2026-06-08 07:47:12.865311 Out-of-Bounds Write in RGB File Parsing
HIGH (8.4)
A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Published: 2026-02-04T16:27:13.416Z
Updated: 2026-06-03T13:37:43.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0660 vulnerable 2026-06-08 07:47:12.864837 Stack Based Buffer Overflow in GIF File Parsing
HIGH (8.4)
A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Published: 2026-02-04T16:27:40.582Z
Updated: 2026-06-03T13:37:12.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0538 vulnerable 2026-06-08 07:47:12.499290 GIF File Parsing Out-of-Bounds Write
HIGH (8.4)
A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Published: 2026-02-04T16:24:36.976Z
Updated: 2026-06-03T13:33:18.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0537 vulnerable 2026-06-08 07:47:12.498848 RGB File Parsing Memory Corruption
HIGH (8.4)
A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Published: 2026-02-04T16:26:01.689Z
Updated: 2026-06-03T13:31:03.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0536 vulnerable 2026-06-08 07:47:12.498356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6634 vulnerable 2026-06-08 07:43:15.734956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6633 vulnerable 2026-06-08 07:43:15.734447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6632 vulnerable 2026-06-08 07:43:15.734042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11797 vulnerable 2026-06-08 07:04:28.962557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11795 vulnerable 2026-06-08 07:04:28.962188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27532 vulnerable 2026-06-08 05:41:55.430370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27531 vulnerable 2026-06-08 05:41:55.430084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25793 vulnerable 2026-06-08 05:41:49.477104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.