CVE-2025-11797: falha de alta gravidade em Autodesk 3ds Max
DWG File Parsing Use-After-Free Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.2%
A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Autodesk · 3ds MaxCVEs relacionadas — Autodesk 3ds Max
No mesmo produto, das mais perigosas para as menos.
CVE-2026-16782MEDIUMSVG File Parsing Out-of-Bounds Read Vulnerability in Autodesk 3ds MaxEPSS 0.4%CVE-2026-0659HIGHUSD File Parsing Out-of-Bounds Write VulnerabilityEPSS 0.2%CVE-2025-6634HIGHTGA File Parsing Memory Corruption VulnerabilityEPSS 0.2%CVE-2025-6633HIGHRBG File Parsing Out-of-Bounds Write VulnerabilityEPSS 0.2%CVE-2026-0660HIGHStack Based Buffer Overflow in GIF File ParsingEPSS 0.2%CVE-2026-0536HIGHGIF File Parsing Stack Based Buffer OverflowEPSS 0.2%