CVE-2026-0536CWE-787

GIF File Parsing Stack Based Buffer Overflow

High · published February 4, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

🚨 A malicious GIF file could turn Autodesk 3ds Max into an unwitting accomplice in a cyber heist! Think of this vulnerability like a hidden trapdoor in a gallery exhibition — a visitor with a crafty plan might exploit it to sneak into the back room where all the valuable artwork is stored. An attacker could craft a seemingly innocent GIF that, once parsed, takes control of the current process, allowing them to execute arbitrary code. This could lead to data theft, unauthorized access, or worse — a complete system compromise.

Put simply

Think of this vulnerability like a hidden trapdoor in a gallery exhibition — a visitor with a crafty plan might exploit it to sneak into the back room where all the valuable artwork is stored. This vulnerability arises from a stack-based buffer overflow when 3ds Max processes a specially crafted GIF file, allowing an attacker to inject and execute arbitrary code in the current context.

What to do

An attacker could craft a seemingly innocent GIF that, once parsed, takes control of the current process, allowing them to execute arbitrary code. This could lead to data theft, unauthorized access, or worse — a complete system compromise. To mitigate this threat, users should patch Autodesk 3ds Max to the latest version immediately. Additionally, avoid opening untrusted GIFs and apply strict input validation to prevent malicious files from being processed. You've got this! Follow these steps and you’ll keep your creative workspace safe from unwelcome intruders. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-04T18:12Z
EPSS history
Timeline
  • 04 FEB 18:12Z
    GIF File Parsing Stack Based Buffer Overflow
    cvelistv5