CVE-2026-103821: Substance3D - Designer | Out-of-bounds Write (CWE-787)
Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Users of Adobe Substance 3D Designer are exposed when they open a malicious file. Successful exploitation runs code in the context of the current user.
What does an attacker need to exploit this issue?
An attacker must persuade or otherwise cause a victim to open a malicious file in Substance 3D Designer. The provided information does not indicate that network access or prior privileges are required.
What should be done if patching cannot happen immediately?
Avoid opening untrusted or unsolicited files in Substance 3D Designer until remediation is available. Treat files from unverified sources as potentially malicious.