Heap-based Buffer Overflow Vulnerability in Substance3D Designer by Adobe

CVE-2026-48431

What is CVE-2026-48431?

Adobe's Substance3D Designer is vulnerable to a heap-based buffer overflow issue that can allow an attacker to execute arbitrary code within the context of the current user. This vulnerability requires user interaction, as the target must open a specially crafted malicious file to trigger the potential exploit. Users are encouraged to remain vigilant and avoid opening untrusted files to mitigate the risk associated with this vulnerability.

References