NULL Pointer Dereference in Substance3D Designer by Adobe
CVE-2026-103824

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Substance 3d Designer
Vendor
CVE Published:
13 October 2026

What is CVE-2026-103824?

The Substance3D Designer application by Adobe is susceptible to a NULL Pointer Dereference issue which can result in a denial-of-service condition. This vulnerability allows an attacker to crash the application, but it requires user interaction, as the victim must open a specially crafted file for exploitation. Ensuring that all users are aware of potential threats and practicing caution when opening files can mitigate the risk of this vulnerability.

Affected Version(s)

Substance 3D Designer 0 <= 16.0.4 and prior

Substance 3D Designer 16.0.7

References

https://www.adobe.com/trust/security/products/substance3d...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.