Heap-based Buffer Overflow in Substance3D Sampler by Adobe

CVE-2026-48424

What is CVE-2026-48424?

Adobe Substance3D Sampler is susceptible to a Heap-based Buffer Overflow vulnerability that can be exploited to execute arbitrary code within the user's context. This vulnerability necessitates user action; specifically, an end user must open a crafted malicious file for exploitation to occur. Successful exploitation could allow an attacker to gain unauthorized control over the affected system. Users are advised to remain vigilant and avoid opening suspicious files to mitigate risks associated with this vulnerability.

References