CVE-2026-7454

Katalog CVE

CVSS 7.8 · High EPSS 0,19%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada autodesk 3ds max. Skor CVSS 3.1 7.8 (High) menurut autodesk.com.

Deskripsi (NVD)

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Rincian

Terbit di NVD

26 Mei 2026

Terakhir diubah

24 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber autodesk.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0006 advisory vendor
• https://www.autodesk.com/products/autodesk-access/overview product