NULL Pointer Dereference in Substance3D Painter by Adobe

CVE-2026-21363

What is CVE-2026-21363?

Substance3D Painter versions 11.1.2 and earlier are susceptible to a NULL Pointer Dereference vulnerability. This flaw can potentially be exploited by attackers to trigger an application denial-of-service (DoS), resulting in service disruptions. The exploitation necessitates user interaction, as a victim must open a specifically crafted, malicious file for the attack to succeed. It is crucial for users of affected versions to remain vigilant and update their software to mitigate risks associated with this vulnerability.

References