CVE-2026-48425: Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)
Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
Who is exposed to exploitation?
Users of Substance3D - Sampler are exposed when they open a malicious file. Successful exploitation can execute code in the context of the current user.
Does exploitation require an attacker to have local access or credentials?
The provided vector indicates local attack access and no privileges required, but exploitation also requires the victim to interact with the malicious file by opening it.
What is the potential impact of successful exploitation?
A successful heap-based buffer overflow could allow arbitrary code execution with the confidentiality, integrity, and availability privileges of the current user.