CVE-2026-103829: Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Users of Adobe Substance 3D Designer who open files from untrusted or potentially malicious sources are exposed. The attacker must induce a victim to open a malicious file in the application.
Does exploitation require an account or elevated privileges?
No privileges are required by the attacker according to the provided vector. However, exploitation requires local attack conditions and user interaction.
What is the likely impact if exploitation succeeds?
Successful exploitation can crash Adobe Substance 3D Designer, causing an application-level denial of service. The provided information does not indicate confidentiality or integrity impact.
What can be done while a patch is not available or cannot be applied?
Avoid opening untrusted files in Adobe Substance 3D Designer. Restrict file intake to trusted sources and validate files through established review processes before opening them.