CVE-2025-11795CWE-787

CVE-2025-11795

High · published November 12, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

⚡ A cleverly crafted JPG could unleash chaos in Autodesk 3ds Max! This Out-of-Bounds Write vulnerability allows attackers to execute arbitrary code, making it a tasty target for mischief! 🔥 Think of it like a chef who unknowingly accepts a dish with hidden toxins. Just as that meal could ruin the restaurant, this JPG file could sabotage your system when 3ds Max misinterprets its contents during processing. An attacker could gain full control of the software, potentially allowing for unauthorized access, data manipulation, or even total system compromise. This vulnerability could turn your creative environment into a playground for malicious intent, so it's critical to address it promptly!

Put simply

Think of it like a chef who unknowingly accepts a dish with hidden toxins. Just as that meal could ruin the restaurant, this JPG file could sabotage your system when 3ds Max misinterprets its contents during processing. The vulnerability in Autodesk 3ds Max arises when it processes a maliciously crafted JPG file, leading to an Out-of-Bounds Write that permits the execution of arbitrary code in the context of the current process.

What to do

An attacker could gain full control of the software, potentially allowing for unauthorized access, data manipulation, or even total system compromise. This vulnerability could turn your creative environment into a playground for malicious intent, so it's critical to address it promptly! To protect yourself, patch Autodesk 3ds Max as soon as updates are available. Ensure you’re running the latest version to mitigate this risk, and consider implementing strict file validation on any incoming files. You've got this! Follow these steps to keep your creative tools safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-11-12T22:15Z
Affected products (1)
ProductVersionsFixed in
autodesk/3ds_max≥ 2026, < 2026.32026.3
References (2)
EPSS history
Timeline
  • 12 NOV 16:24Z
    JPG File Parsing Out-of-Bounds Write Vulnerability
    cvelistv5