CVE Catalog

CVE-2026-19568

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.13%

3th percentile - higher than 3% of all known CVEs

Summary

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. An attacker can leverage this to execute arbitrary code in the context of the current process.

Risk Assessment

The organization may be exposed to arbitrary code execution on workstations with 3ds Max installed, potentially leading to system compromise or data theft.

Recommendation

Update Autodesk 3ds Max to the latest version with the fix. Avoid opening SVG files from untrusted sources.

Other vulnerabilities in Autodesk 3ds Max

See all
Original NVD description (English source)

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS