CVE-2026-103824: Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker must convince a user to open a malicious file in Adobe Substance 3D Designer. The vector is local and user interaction is required.
What is the expected impact if exploitation succeeds?
Successful exploitation can crash the application and cause a denial-of-service condition. The provided information does not indicate confidentiality or integrity impact.
How can teams reduce risk if they cannot patch immediately?
Avoid opening untrusted or unexpected files in Adobe Substance 3D Designer, particularly files received from external sources. Because exploitation requires a victim to open a malicious file, file-handling controls can reduce exposure.