NULL Pointer Dereference Vulnerability in Substance3D Designer by Adobe
CVE-2026-103828
5.5MEDIUM
What is CVE-2026-103828?
Substance3D Designer by Adobe is prone to a NULL Pointer Dereference vulnerability that may allow an attacker to crash the application, resulting in a denial-of-service (DoS) scenario. Successful exploitation of this vulnerability necessitates user interaction, as it requires the victim to open a specially crafted malicious file. Users of the affected product should be aware of the risks associated with handling untrusted files and consider applying patches or updates as provided by Adobe.
Affected Version(s)
Substance 3D Designer 0 <= 16.0.4 and prior
Substance 3D Designer 16.0.7