NULL Pointer Dereference Vulnerability in Substance3D Designer by Adobe
CVE-2026-103828

5.5MEDIUM

Key Information:

Vendor

Adobe

Vendor
CVE Published:
13 October 2026

What is CVE-2026-103828?

Substance3D Designer by Adobe is prone to a NULL Pointer Dereference vulnerability that may allow an attacker to crash the application, resulting in a denial-of-service (DoS) scenario. Successful exploitation of this vulnerability necessitates user interaction, as it requires the victim to open a specially crafted malicious file. Users of the affected product should be aware of the risks associated with handling untrusted files and consider applying patches or updates as provided by Adobe.

Affected Version(s)

Substance 3D Designer 0 <= 16.0.4 and prior

Substance 3D Designer 16.0.7

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.