CVE-2026-83965: Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)
Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Adobe Substance 3D Sampler are exposed when they open a malicious file. Successful exploitation runs code in the context of the current user.
What does an attacker need to exploit it?
An attacker needs to persuade a victim to open a malicious file in Substance 3D Sampler. The vulnerability does not require attacker privileges, but it does require user interaction.
How can exposure be reduced if patching cannot happen immediately?
Do not open untrusted or unexpected files in Substance 3D Sampler, especially files received through unsolicited messages or from unverified sources. Restrict use of the application to files from trusted sources until remediation is available.