This vulnerability (CVE-2026-0660) involves a stack-based buffer overflow (CWE-121) in Autodesk 3ds Max version 2026. The flaw is triggered by processing a specially crafted GIF file, which can lead to arbitrary code execution under the current process context. The CVSS 3.1 base score is 8.4, reflecting high impact on confidentiality, integrity, and availability. The attack vector is local (AV:L), requiring the attacker to have local access to the system. No vendor patch or advisory detailing remediation is currently available.

Successful exploitation can allow an attacker to execute arbitrary code with the privileges of the Autodesk 3ds Max process, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. Since the attack vector is local, the attacker must have local access to the system. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid opening untrusted GIF files with Autodesk 3ds Max 2026 and restrict local access to trusted users only.