Out-of-Bounds Write Vulnerability in Substance3D Designer by Adobe
CVE-2026-103821

7.8HIGH

Key Information:

Vendor

Adobe
Status
Substance 3d Designer
Vendor
CVE Published:
13 October 2026

What is CVE-2026-103821?

Substance3D Designer by Adobe is vulnerable to an out-of-bounds write issue that may lead to arbitrary code execution, allowing attackers to manipulate the software in the context of the current user. This vulnerability necessitates user interaction, as the exploitation can only occur when a malicious file is opened by the victim. Effective security measures should be implemented to safeguard against this potential risk.

Affected Version(s)

Substance 3D Designer 0 <= 16.0.4 and prior

Substance 3D Designer 16.0.7

References

https://www.adobe.com/trust/security/products/substance3d...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.