Autodesk 3Ds Max vulnerabilities

CVE-2022-27531 [HIGH] CWE-125 CVE-2022-27531: A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CVE-2023-25002 [HIGH] CWE-416 CVE-2023-25002: A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

CVE-2026-7453 [MEDIUM] CWE-674 CVE-2026-7453: A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion v A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion vulnerability, leading to a denial-of-service condition.

CVE-2026-7450 [MEDIUM] CWE-476 CVE-2026-7450: A maliciously crafted PAR file, when parsed through Autodesk 3ds Max, can force a NULL Pointer Deref A maliciously crafted PAR file, when parsed through Autodesk 3ds Max, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.

CVE-2005-4710 [MEDIUM] CVE-2005-4710: Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 a Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows remote attackers to "gain inappropriate access to another local user's computer," aka ID DL5549329.