CVE-2026-83966: Substance3D - Sampler | Out-of-bounds Write (CWE-787)
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker must convince a victim to open a malicious file in Substance 3D Sampler. No attacker privileges are required, but exploitation requires user interaction.
What is the impact if exploitation succeeds?
Successful exploitation could allow arbitrary code execution in the context of the current user. Confidentiality, integrity, and availability may all be affected at that user's privilege level.
Who is most exposed?
Users who open untrusted or externally supplied files with Adobe Substance 3D Sampler are exposed. The provided information does not identify affected versions or configuration-specific conditions.