A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 26, 2026 · NIST NVD

   Detected

   A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

2. Jul 24, 2026 · NIST NVD

   Updated

   A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected

• cpe autodesk/3ds max2026
• cpe autodesk/3ds max2027

Sources

• CVE.orgVulnerability recordCVE-2026-7452

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-7452

  A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

  nvd.nist.gov

References

• Product · autodesk.com
• Vendor Advisory · autodesk.com