This vulnerability (CVE-2026-7451) involves an out-of-bounds write (CWE-787) in Autodesk 3ds Max when processing specially crafted TIF files. Successful exploitation requires user interaction (opening the malicious file) and can result in high impact outcomes including code execution, data corruption, or denial of service. The affected versions are 2026 and 2027 of 3ds Max. The CVSS vector indicates local attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability.

An attacker who convinces a user to open a malicious TIF file in Autodesk 3ds Max 2026 or 2027 could cause the application to crash, corrupt data, or execute arbitrary code with the privileges of the current user. This could lead to compromise of the affected system or disruption of normal operations. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening TIF files from untrusted sources and consider restricting access to such files. Monitor Autodesk's official channels for updates and apply patches promptly once available.