CVE-2026-0659

Publication date

2026-02-04 16:01:27

Family

autodesk

State

PUBLISHED

Description

A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.