Out-of-Bounds Read Vulnerability in Substance3D Sampler by Adobe
CVE-2026-100131

5.5MEDIUM

Key Information:

Vendor

Adobe

Vendor
CVE Published:
13 October 2026

What is CVE-2026-100131?

Adobe's Substance3D Sampler is susceptible to an out-of-bounds read vulnerability, potentially allowing attackers to access sensitive memory information. Exploitation of this flaw necessitates user interaction, meaning that a victim must open a specially crafted malicious file for the disclosure of sensitive data to occur. Users of Substance3D Sampler should remain vigilant and apply security updates promptly to mitigate risks associated with this vulnerability.

Affected Version(s)

Substance 3D Sampler 0 <= 6.0.3

Substance 3D Sampler 6.0.4

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.