PT-2026-6014 · Autodesk · Autodesk 3Ds Max+1

Publicado 2026-02-04 · Atualizado 2026-02-09 · CVE-2026-0659

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk Arnold (affected versions not specified) Autodesk 3ds Max (affected versions not specified)

Description A specially designed USD file can cause an Out-of-Bounds Write issue when opened or imported into Autodesk Arnold or Autodesk 3ds Max. An attacker could potentially use this to run code with the same permissions as the current process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2026-0659

Produtos afetados

Autodesk 3Ds Max

Autodesk Arnold

Referências · 6

• https://github.com/Autodesk/arnold-usd · Correção
• https://autodesk.com/trust/security-advisories/adsk-sa-2026-0003 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-0659 · Aviso do Fabricante
• https://twitter.com/cracbot/status/2020815001867665729 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-0659 · Nota de Segurança
• https://autodesk.com/products/autodesk-access/overview · Correção