Uncontrolled Recursion Vulnerability in Autodesk 3ds Max Product
CVE-2026-16781

5.5MEDIUM

Key Information:

Vendor

Autodesk
Status
3ds Max
Vendor
CVE Published:
24 August 2026

What is CVE-2026-16781?

A vulnerability exists in Autodesk 3ds Max that can be exploited through a specially crafted SVG file. When this file is processed by the application, it can cause an uncontrolled recursion scenario, leading to unexpected termination of the software. This can result in denial-of-service, impacting user productivity and workflow. Users of Autodesk 3ds Max are advised to follow security advisories to mitigate the risk associated with this vulnerability.

Affected Version(s)

3ds Max 2027.0.0 < 2027.2.0

3ds Max 2026.0.0 < 2026.3.4

References

https://www.autodesk.com/trust/security-advisories/adsk-s...
vendor-advisory
https://www.autodesk.com/products/autodesk-access/overview
patch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.