NULL Pointer Dereference Vulnerability in Adobe Substance3D Designer
CVE-2026-103826

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Substance 3d Designer
Vendor
CVE Published:
13 October 2026

What is CVE-2026-103826?

Adobe Substance3D Designer is susceptible to a NULL Pointer Dereference vulnerability that can lead to application crashes, effectively causing a denial-of-service condition. Attackers might exploit this weakness by enticing users to open specially crafted files. To mitigate the risks associated with this vulnerability, it is crucial for all users to apply the latest security patches as soon as they become available.

Affected Version(s)

Substance 3D Designer 0 <= 16.0.4 and prior

Substance 3D Designer 16.0.7

References

https://www.adobe.com/trust/security/products/substance3d...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.