Heap-based Buffer Overflow in Substance3D Designer by Adobe

CVE-2026-48433

What is CVE-2026-48433?

Adobe's Substance3D Designer is susceptible to a heap-based buffer overflow vulnerability, which may enable an attacker to execute arbitrary code with the privileges of the current user. Exploitation of this vulnerability necessitates user interaction, requiring the victim to open a specially crafted file designed to trigger the flaw. It is crucial for users to avoid opening suspicious files and to monitor for updates from Adobe addressing this issue.

References