CVE-2026-103822: Substance3D - Designer | Out-of-bounds Read (CWE-125)
Published Oct 13, 2026
·Updated
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
1 affected component
Adobe Substance 3D Designer
Event History
Oct 13, 2026
CVE Published
via MITRE·08:34 PM
Data Sourced
via MITRE·08:34 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to exploitation?
Users of Adobe Substance 3D Designer who open a malicious file are exposed. The vulnerability has local attack vector characteristics and does not require attacker privileges, but user interaction is required.
2
What can an attacker achieve?
An attacker could disclose sensitive information from memory through an out-of-bounds read. The provided severity vector indicates confidentiality impact only, with no stated integrity or availability impact.