CVE-2026-0661CWE-787

Out-of-Bounds Write in RGB File Parsing

High · published February 4, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

⚡ Just one cleverly disguised RGB file could lead to chaos in Autodesk 3ds Max! A memory corruption vulnerability could open the door for attackers to run any code they want. 😱 Think of it as a sneaky chef who manages to swap a safe ingredient in your favorite dish with something toxic, leaving the restaurant exposed to serious health risks. This vulnerability allows an attacker to craft a seemingly harmless RGB file that can corrupt memory, just like that chef's perfect disguise. If exploited, this vulnerability could let a malicious actor execute arbitrary code within the current process, leading to potentially devastating consequences — from data breaches to complete system takeovers. The risks are especially high in environments where Autodesk 3ds Max is used for vital design projects.

Put simply

Think of it as a sneaky chef who manages to swap a safe ingredient in your favorite dish with something toxic, leaving the restaurant exposed to serious health risks. This vulnerability allows an attacker to craft a seemingly harmless RGB file that can corrupt memory, just like that chef's perfect disguise. CVE-2026-0661 is a memory corruption vulnerability that occurs when Autodesk 3ds Max processes a maliciously crafted RGB file. The flaw allows attackers to run arbitrary code in the context of the affected application, making it a serious security concern.

What to do

If exploited, this vulnerability could let a malicious actor execute arbitrary code within the current process, leading to potentially devastating consequences — from data breaches to complete system takeovers. The risks are especially high in environments where Autodesk 3ds Max is used for vital design projects. To protect yourself, ensure you're running the latest version of Autodesk 3ds Max with all security patches applied. Regularly review and validate any RGB files before using them in your projects. Consider enhancing your security measures with robust antivirus solutions. You've got this! Stay vigilant and your systems will remain secure. 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-04T16:27Z
EPSS history
Timeline
  • 04 FEB 16:27Z
    Out-of-Bounds Write in RGB File Parsing
    cvelistv5