NULL Pointer Dereference Vulnerability in Substance3D Painter by Adobe

CVE-2026-21364

What is CVE-2026-21364?

Substance3D Painter versions 11.1.2 and earlier have a vulnerability that allows an attacker to trigger a NULL Pointer Dereference. This issue can lead to a denial-of-service scenario as the application may crash upon processing a crafted file. Successful exploitation necessitates user interaction, as a victim must open the malicious file for the attack to take effect. The potential impact includes service disruption and an interrupted user experience, emphasizing the need for caution when handling unknown file types.

References