This vulnerability (CWE-787) in Autodesk 3ds Max arises from improper handling of ABC files, allowing an out-of-bounds write. A specially crafted ABC file can cause memory corruption, potentially enabling an attacker to crash the application, corrupt data, or execute arbitrary code with the privileges of the current user process. The affected versions are exactly 2026.0.0 and 2027.0.0. The CVSS 3.1 vector indicates local attack vector with low complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation can result in a crash of Autodesk 3ds Max, corruption of data processed by the application, or execution of arbitrary code within the context of the current user. This could lead to compromise of the system or loss of data integrity and availability. The vulnerability requires local access and user interaction to trigger.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening ABC files from untrusted sources and consider restricting access to such files. Monitor Autodesk's official channels for updates and patches.