Out-of-bounds Read Vulnerability in Substance3D Designer by Adobe

CVE-2026-21308

What is CVE-2026-21308?

Adobe Substance3D Designer versions 15.0.3 and earlier are susceptible to an Out-of-bounds Read vulnerability, which could potentially expose sensitive information held in memory. This issue necessitates user interaction, as an attacker would need the victim to open a maliciously crafted file for exploitation. It is crucial to ensure that users are educated on the risks associated with opening unfamiliar files to mitigate potential information disclosure.

References