CVE-2026-16783: CWE-787 Out-of-bounds Write in Autodesk 3ds Max

This vulnerability (CWE-787) in Autodesk 3ds Max arises from improper handling of ABC files, allowing an attacker to perform an out-of-bounds write. Successful exploitation can cause denial of service through crashes, corrupt data, or potentially execute arbitrary code with the privileges of the 3ds Max process. The affected versions explicitly include 2026.0.0 and 2027.0.0. The CVSS vector indicates local attack vector with low complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and no exploits are known in the wild.

An attacker who can supply a crafted ABC file to Autodesk 3ds Max may cause the application to crash, corrupt data, or execute arbitrary code within the application's process context. This could lead to compromise of the affected system or denial of service. The impact is rated high based on the CVSS score of 7.8 with high confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening ABC files from untrusted sources and consider restricting access to such files. Monitor Autodesk's official channels for updates on patches or mitigations.