Heap-based Buffer Overflow Vulnerability in Substance3D Sampler by Adobe
CVE-2026-48425

7.8HIGH

Key Information:

Vendor

Adobe
Status
Adobe Substance 3d Sampler
Vendor
CVE Published:
25 August 2026

What is CVE-2026-48425?

Adobe's Substance3D Sampler has a vulnerability involving a heap-based buffer overflow, which could allow attackers to execute arbitrary code through malicious files. The exploitation requires a victim to interact by opening a specially crafted file, thus highlighting the importance of cautious file management. Users should ensure their systems are updated and be vigilant to mitigate the potential risks associated with this vulnerability.

Affected Version(s)

Adobe Substance 3D Sampler 0 <= 6.0.1

Adobe Substance 3D Sampler 0 <= 6.0.1

Adobe Substance 3D Sampler 6.0.3

References

https://helpx.adobe.com/security/products/substance3d-sam...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.