CVE-2026-48380: Substance3D - Painter | Out-of-bounds Read (CWE-125)
Published Oct 27, 2026
·Updated
Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
1 affected component
Adobe Substance 3D Painter
Event History
Oct 27, 2026
CVE Published
via MITRE·04:23 PM
Data Sourced
via MITRE·04:23 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to exploitation?
Users of Substance3D - Painter are exposed if they open a malicious file. Exploitation requires local access and user interaction.
2
What can an attacker achieve?
An attacker could use the out-of-bounds read to disclose sensitive information from memory. The provided information does not indicate integrity or availability impact.