Technology · Autodesk
Autodesk 3ds Max vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 37 vulnerabilities in Autodesk 3ds Max: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-7455, was published on 24 August 2026. Nothing was published in the last eight weeks.
- Last 7 days
- 0
- Last 90 days
- 5
- Critical, all time
- 0
- Exploited in the wild
- 0
About Autodesk 3ds Max
3ds Max is 3D computer graphics software for modeling, animation, and rendering.
Latest Autodesk 3ds Max vulnerabilities
- CVE-2026-7455: Autodesk 3ds Max out-of-bounds write in FLT file parsinghighCVSS 7.8EPSS 0.2%
- CVE-2026-19568: Autodesk 3ds Max memory corruption in SVG parsinghighCVSS 7.8EPSS 0.1%
- CVE-2026-16783: Autodesk 3ds Max out-of-bounds write in ABC file parsinghighCVSS 7.8EPSS 0.1%
- CVE-2026-16782: Autodesk 3ds Max out-of-bounds read in SVG parsingmediumCVSS 5.3EPSS 0.2%
- CVE-2026-16781: Autodesk 3ds Max uncontrolled recursion in SVG parsingmediumCVSS 5.5EPSS 0.1%
- CVE-2026-7454: Autodesk 3ds Max memory corruption in WRL file parsinghighCVSS 7.8
- CVE-2026-7453: Autodesk 3ds Max stack exhaustion in WRL parsingmediumCVSS 5.3
- CVE-2026-7452: Autodesk 3ds Max memory corruption in WRL parsinghighCVSS 7.8
- CVE-2026-7451: Autodesk 3ds Max out-of-bounds write in TIF parsinghighCVSS 7.8
- CVE-2026-7450: Autodesk 3ds Max NULL Pointer Dereference in PAR file parsingmediumCVSS 5.3
- CVE-2026-0661: Autodesk 3ds Max memory corruption in RGB file parsinghighCVSS 8.4EPSS 0.0%
- CVE-2026-0660: Autodesk 3ds Max stack buffer overflow in GIF parsinghighCVSS 8.4EPSS 0.0%
- CVE-2026-0538: Autodesk 3ds Max out-of-bounds write in GIF parsinghighCVSS 8.4EPSS 0.0%
- CVE-2026-0537: Autodesk 3ds Max memory corruption in RGB file parsinghighCVSS 8.4EPSS 0.0%
- CVE-2025-9460: A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read…highCVSS 7.8EPSS 0.3%
- CVE-2025-9459: A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read…highCVSS 7.8EPSS 0.3%
- CVE-2025-9457: A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory corruption…highCVSS 7.8EPSS 0.2%
- CVE-2025-9456: A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption…highCVSS 7.8EPSS 0.3%
- CVE-2025-9455: A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read…highCVSS 7.8EPSS 0.3%
- CVE-2025-9454: A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read…highCVSS 7.8EPSS 0.3%
- CVE-2025-9453: A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read…highCVSS 7.8EPSS 0.3%
- CVE-2025-9452: A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption…highCVSS 7.8EPSS 0.3%
- CVE-2025-14593: A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read…highCVSS 7.8EPSS 0.3%
- CVE-2025-10900: AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write…highCVSS 7.8EPSS 0.3%
- CVE-2025-10899: AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write…highCVSS 7.8EPSS 0.3%
Most severe Autodesk 3ds Max vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-0661: Autodesk 3ds Max memory corruption in RGB file parsinghighCVSS 8.4EPSS 0.0%
- CVE-2026-0660: Autodesk 3ds Max stack buffer overflow in GIF parsinghighCVSS 8.4EPSS 0.0%
- CVE-2026-0538: Autodesk 3ds Max out-of-bounds write in GIF parsinghighCVSS 8.4EPSS 0.0%
- CVE-2026-0537: Autodesk 3ds Max memory corruption in RGB file parsinghighCVSS 8.4EPSS 0.0%
- CVE-2025-9456: A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption…highCVSS 7.8EPSS 0.3%
- CVE-2025-9452: A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption…highCVSS 7.8EPSS 0.3%
- CVE-2025-10886: A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption…highCVSS 7.8EPSS 0.3%
- CVE-2025-10884: AA maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write…highCVSS 7.8EPSS 0.3%
- CVE-2025-10883: A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read…highCVSS 7.8EPSS 0.3%
- CVE-2025-10882: AA maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write…highCVSS 7.8EPSS 0.3%
Vulnerabilities per week
Nothing was published in the last eight weeks. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 5 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Autodesk 3ds Max vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/3ds-max)<a href="https://junglewise.ai/threats/technologies/3ds-max"><img src="https://junglewise.ai/threats/technologies/3ds-max/badge.svg" alt="Autodesk 3ds Max vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/3ds-max.json, and this page as text at https://junglewise.ai/threats/technologies/3ds-max.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Autodesk 3ds Max vulnerabilities", https://junglewise.ai/threats/technologies/3ds-max, 13 November 2026.