CVE-2026-34710: Substance3D - Sampler | Out-of-bounds Write (CWE-787)
Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Do not open Substance3D - Sampler files from untrusted or suspicious sources; this vulnerability requires a victim to open a malicious file.
- Compensating control
If unknown or untrusted Sampler files must be examined, do so only in an isolated sandbox or virtual machine until an official vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34710?
The severity of CVE-2026-34710 is rated as high with a score of 7.8.
How do I fix CVE-2026-34710?
To fix CVE-2026-34710, update Adobe Substance 3D Sampler to version 6.0.1 or later.
What is the impact of CVE-2026-34710?
CVE-2026-34710 can lead to arbitrary code execution in the context of the current user.
What causes CVE-2026-34710?
CVE-2026-34710 is caused by an out-of-bounds write vulnerability in versions 6.0.0 and earlier of Adobe Substance 3D Sampler.
Do I need user interaction to exploit CVE-2026-34710?
Yes, exploitation of CVE-2026-34710 requires user interaction, specifically opening a malicious file.