Описание
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Уязвимые конфигурации
Конфигурация 1Версия от 2026 (включая) до 2026.3.4 (исключая)Версия от 2027 (включая) до 2027.2 (исключая)
Одно из
cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*
EPSS
Процентиль: 11%
0.00208
Низкий
5.3 Medium
CVSS3
7.8 High
CVSS3
Дефекты
CWE-125
Связанные уязвимости
CVSS3: 5.3
github
27 дней назад
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
EPSS
Процентиль: 11%
0.00208
Низкий
5.3 Medium
CVSS3
7.8 High
CVSS3
Дефекты
CWE-125