NULL Pointer Dereference Vulnerability in Substance3D Designer by Adobe
CVE-2026-103829

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Substance 3d Designer
Vendor
CVE Published:
13 October 2026

What is CVE-2026-103829?

Substance3D Designer by Adobe is susceptible to a NULL Pointer Dereference vulnerability that can be exploited to trigger a denial-of-service condition. An attacker can leverage this flaw by enticing a user to open a maliciously crafted file, leading the application to crash and affecting its availability. Ensuring users are aware of such risks and encouraging caution when handling unknown files is critical to mitigating potential impacts.

Affected Version(s)

Substance 3D Designer 0 <= 16.0.4 and prior

Substance 3D Designer 16.0.7

References

https://www.adobe.com/trust/security/products/substance3d...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.