7.8Yüksek

CVE-2026-0659USD File Parsing Out-of-Bounds Write Vulnerability

Autodesk USD for Arnold; Autodesk Arnold; Autodesk 3ds Max Yayım: (9 ay önce)

Açıklama

A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Zayıflık türü (CWE): CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Autodesk 3ds Max 2026.2 – < 2026.3.2
Autodesk Arnold 7.4.4.1 – < 7.4.4.2
Autodesk USD for Arnold 7.4.4.1 – < 7.4.4.2

Kaynaklar ve yamalar