CVE-2026-103822: Substance3D - Designer | Out-of-bounds Read (CWE-125)
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
Who is exposed to exploitation?
Users of Adobe Substance 3D Designer who open a malicious file are exposed. The vulnerability has local attack vector characteristics and does not require attacker privileges, but user interaction is required.
What can an attacker achieve?
An attacker could disclose sensitive information from memory through an out-of-bounds read. The provided severity vector indicates confidentiality impact only, with no stated integrity or availability impact.