Out-of-Bounds Read Vulnerability in Adobe Substance 3D Designer
CVE-2026-21340

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Substance3d - Designer
Vendor
CVE Published:
10 February 2026

What is CVE-2026-21340?

An out-of-bounds read vulnerability exists in versions 15.1.0 and earlier of Adobe Substance 3D Designer, potentially allowing attackers to access sensitive memory data. Successful exploitation demands user interaction, as it requires the opening of a specially crafted malicious file. Users should remain cautious and quickly implement available security updates to mitigate risks associated with this vulnerability.

Affected Version(s)

Substance3D - Designer 0 <= 15.1.0

References

https://helpx.adobe.com/security/products/substance3d_des...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.