This vulnerability involves an out-of-bounds write (CWE-787) triggered by processing a specially crafted GIF file in Autodesk 3ds Max 2026. Successful exploitation could lead to arbitrary code execution in the context of the current process, potentially allowing an attacker to compromise the affected system. The CVSS 3.1 vector indicates local attack vector with low complexity, no privileges required, and no user interaction needed, making it a serious threat if exploited.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the Autodesk 3ds Max process, potentially leading to full system compromise depending on the context in which the software runs. The impact affects confidentiality, integrity, and availability as indicated by the CVSS score. However, there are currently no known exploits in the wild.

Patch status is not yet confirmed — check the Autodesk vendor advisory for current remediation guidance. Until an official fix is released, avoid opening untrusted GIF files with Autodesk 3ds Max 2026. Monitor Autodesk communications for updates on patches or workarounds.