Heap-based Buffer Overflow in Substance3D Sampler by Adobe

CVE-2026-34674

What is CVE-2026-34674?

The Substance3D Sampler software from Adobe is susceptible to a heap-based buffer overflow vulnerability. This issue permits arbitrary code execution when a user interacts with a specially crafted malicious file. Successful exploitation hinges on user action, requiring a victim to open the compromised file. This vulnerability poses significant risk as it operates in the context of the current user, potentially allowing an attacker to execute malicious code within the user's environment.

References