CVE-2026-0659
USD File Parsing Out-of-Bounds Write Vulnerability
A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products