Heap-based Buffer Overflow Vulnerability in Substance3D Designer by Adobe

CVE-2026-48428

What is CVE-2026-48428?

Substance3D Designer by Adobe is susceptible to a Heap-based Buffer Overflow vulnerability, which can lead to arbitrary code execution under the context of the current user. The exploitation of this vulnerability requires user interaction, as the victim must open a specially crafted malicious file. It's crucial for users of Substance3D Designer to remain vigilant and update to the latest versions to mitigate potential risks.

References