Out-of-Bounds Write Vulnerability in Autodesk Arnold and 3ds Max
CVE-2026-0659
7.8HIGH
What is CVE-2026-0659?
A vulnerability has been identified where a specially crafted USD file can induce an Out-of-Bounds Write condition when loaded or imported into Autodesk Arnold or Autodesk 3ds Max. This issue can be exploited by a malicious actor to execute arbitrary code within the context of the affected process, potentially compromising system integrity and user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
3ds Max 2026.2 < 2026.3.2
Arnold 7.4.4.1 < 7.4.4.2
USD for Arnold 7.4.4.1 < 7.4.4.2