CVE-2026-16781— SVG File Parsing Stack Exhaustion Vulnerability in Autodesk 3ds Max
Quick assessment
Affected
Autodesk 3ds Max
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
恶意构造的 SVG 文件在通过 Autodesk 3ds Max 解析时，可触发“不受控制的递归”（Uncontrolled Recursion）漏洞。攻击者可能利用该漏洞导致应用程序意外终止，从而引发拒绝服务（Denial-of-Service, DoS）攻击。
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-16781
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SVG File Parsing Stack Exhaustion Vulnerability in Autodesk 3ds Max
Source: CVE Program / CVE List V5
Vulnerability Description
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未经控制的递归
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-16781
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-16781
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-16781 (1)
Same Patch Batch · Autodesk · 2026-08-24 · 5 CVEs total
| CVE-2026-7455 | 7.8 HIGH | FLT File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max |
| CVE-2026-16783 | 7.8 HIGH | ABC File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max |
| CVE-2026-19568 | 7.8 HIGH | SVG File Parsing Memory Corruption Vulnerability in Autodesk 3ds Max |
| CVE-2026-16782 | 5.3 MEDIUM | SVG File Parsing Out-of-Bounds Read Vulnerability in Autodesk 3ds Max |
IV. Related Vulnerabilities
Same product: 3ds Max
-
CVE-2026-19568
SVG File Parsing Memory Corruption Vulnerability in Autodesk -
CVE-2026-7455
FLT File Parsing Out-of-Bounds Write Vulnerability in Autode -
CVE-2026-16783
ABC File Parsing Out-of-Bounds Write Vulnerability in Autode -
CVE-2026-16782
SVG File Parsing Out-of-Bounds Read Vulnerability in Autodes -
CVE-2026-7454
WRL File Parsing Memory Corruption in Autodesk 3ds Max
Same vendor: Autodesk
-
CVE-2026-19568
SVG File Parsing Memory Corruption Vulnerability in Autodesk -
CVE-2026-7455
FLT File Parsing Out-of-Bounds Write Vulnerability in Autode -
CVE-2026-16783
ABC File Parsing Out-of-Bounds Write Vulnerability in Autode -
CVE-2026-16782
SVG File Parsing Out-of-Bounds Read Vulnerability in Autodes -
CVE-2026-14479
Denial of Service in Autodesk Installer IPC Channel
Same weakness: CWE-674
-
CVE-2026-76098
Mistune has Denial of Service — RecursionError via Excessive -
CVE-2026-9769
justhtml before 1.10.0 Denial of Service via deeply nested H -
CVE-2026-66393
NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder -
CVE-2026-63462
Unleash: Unauthenticated single-request DoS via OpenAPI vali -
CVE-2026-54623
django CMS: Plugin move endpoint allows cyclic reparenting (
V. Comments for CVE-2026-16781
No comments yet