Описание
A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Уязвимые конфигурации
Конфигурация 1Версия от 2026 (включая) до 2026.3 (исключая)
cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*
EPSS
Процентиль: 8%
0.00029
Низкий
7.8 High
CVSS3
Дефекты
CWE-416
Связанные уязвимости
CVSS3: 7.8
github
3 месяца назад
A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
EPSS
Процентиль: 8%
0.00029
Низкий
7.8 High
CVSS3
Дефекты
CWE-416