This vulnerability (CVE-2026-7453) in Autodesk 3ds Max arises from uncontrolled recursion when parsing a specially crafted WRL file. The recursive calls exhaust the stack, causing the application to crash or become unresponsive, resulting in a denial-of-service condition. The CVSS 3.1 base score is 5.3 (medium), reflecting that exploitation requires local access with user interaction and results in limited impact on confidentiality, integrity, and availability. Affected versions include 2026 and 2027. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

Successful exploitation can cause Autodesk 3ds Max to crash or hang due to stack exhaustion, leading to denial of service. The impact on confidentiality and integrity is limited, as the vulnerability primarily disrupts availability. Exploitation requires local access and user interaction, reducing the likelihood of remote or automated attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening WRL files from untrusted sources and consider restricting access to the affected versions of Autodesk 3ds Max. No official remediation or temporary workaround is currently documented.