HarborGuard / CVE
Back to search
HIGHCVE-2026-0659Published Modified CNA autodesk

CVE-2026-0659: USD File Parsing Out-of-Bounds Write Vulnerability

A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Metrics

CVSS v3.1
7.8
Severity
HIGH
Fixed in
7.4.4.2
Affected Products
3

Fix available

7.4.4.22026.3.2
Patch commits
Affected packages
  • Autodesk / USD for Arnold
    < 7.4.4.2 (from 7.4.4.1)
  • Autodesk / Arnold
    < 7.4.4.2 (from 7.4.4.1)
  • Autodesk / 3ds Max
    < 2026.3.2 (from 2026.2)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References