CVE-2026-48427: Substance3D - Designer | Out-of-bounds Write (CWE-787)
Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Adobe Substance 3D - Designer are exposed when they open a malicious file. Any resulting code execution occurs in the context of the current user.
What must an attacker do to exploit the vulnerability?
An attacker must provide a malicious file and persuade or otherwise cause a victim to open it in Substance 3D - Designer. The provided data does not indicate that exploitation can occur without user interaction.
What is the potential impact if exploitation succeeds?
Successful exploitation could result in arbitrary code execution with the privileges of the current user. The reported severity is high, with impacts to confidentiality, integrity, and availability.