A malformed GIF file can trigger a stack-based buffer overflow when parsed by Autodesk 3ds Max, allowing an attacker to run arbitrary code within the application's process. The vulnerability falls under CWE-787 and is rated high severity with a CVSS score of 7.8.

Autodesk 3ds Max is the affected product. The advisory does not specify all vulnerable versions, but references indicate issues in the 2026 release line. Users of any 3ds Max version that has not yet applied the latest patch are potentially affected.

Based on the description, it is inferred that the attacker may need to craft a malicious GIF and convince a user to open it in 3ds Max. The CVSS score reflects a significant risk, but the EPSS score is less than 1% and the vulnerability is not listed in KEV, suggesting low exploitation probability at present. The exploit requires the attacker to craft a malicious GIF and convince a user to open it in 3ds Max, implying a local or user‑initiated attack vector. No public exploit code has been disclosed, but the vulnerability can lead to full code execution under the current user’s privileges.