CVE-2025-6632
📋 TL;DR
CVE-2025-6632 is an out-of-bounds read vulnerability in Autodesk 3ds Max that allows malicious PSD files to cause crashes, leak sensitive data, or potentially execute arbitrary code. This affects all users who open or import PSD files in vulnerable versions of 3ds Max. The vulnerability requires user interaction to open a malicious file.
💻 Affected Systems
- Autodesk 3ds Max
📦 What is this software?
3ds Max by Autodesk
⚠️ Risk & Real-World Impact
Worst Case
Arbitrary code execution with the privileges of the 3ds Max process, potentially leading to full system compromise if running with elevated privileges.
Likely Case
Application crash or sensitive memory data leakage, disrupting workflows and potentially exposing confidential information.
If Mitigated
Limited impact with proper file validation and user awareness, potentially just application instability.
🎯 Exploit Status
Requires user to open a specially crafted PSD file. Exploitation for code execution would require additional memory manipulation techniques.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Check Autodesk advisory ADSK-SA-2025-0016 for specific patched versions
Vendor Advisory: https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0016
Restart Required: No
Instructions:
1. Visit Autodesk Trust Center. 2. Locate advisory ADSK-SA-2025-0016. 3. Download and install the security update for your 3ds Max version. 4. Verify installation through version check.
🔧 Temporary Workarounds
Restrict PSD file processing
allConfigure 3ds Max to avoid processing PSD files from untrusted sources
User awareness training
allTrain users to only open PSD files from trusted sources
🧯 If You Can't Patch
- Implement application whitelisting to restrict 3ds Max execution to trusted systems only
- Use file integrity monitoring to detect unauthorized PSD file modifications
- Isolate 3ds Max systems from critical network segments
🔍 How to Verify
Check if Vulnerable:
Check 3ds Max version against affected versions listed in Autodesk advisory ADSK-SA-2025-0016Check Version:
In 3ds Max: Help > About Autodesk 3ds MaxVerify Fix Applied:
Verify installed version matches or exceeds patched version from Autodesk advisory📡 Detection & Monitoring
Log Indicators:
- 3ds Max crash logs with memory access violations
- Unexpected process termination events
Network Indicators:
- Unusual file transfers of PSD files to 3ds Max systems
SIEM Query:
EventID=1000 OR EventID=1001 AND ProcessName="3dsmax.exe" AND ExceptionCode=0xC0000005