CVE-2026-103825: Substance3D - Designer | Out-of-bounds Read (CWE-125)
Published Oct 13, 2026
·Updated
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
1 affected component
Adobe Substance 3D Designer
Event History
Oct 13, 2026
CVE Published
via MITRE·08:34 PM
Data Sourced
via MITRE·08:34 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to exploitation?
Users of Adobe Substance 3D Designer who open a malicious file are exposed. The attack requires local access and user interaction.
2
What must an attacker do to exploit this issue?
An attacker must provide a malicious file and persuade or otherwise cause a victim to open it in the affected application. Successful exploitation could disclose sensitive information from memory.