Description
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-10-13
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Patch
AI Analysis

Impact

Substance 3D Sampler has an out‑of‑bounds read vulnerability that can expose sensitive memory contents. An attacker can cause the application to read data beyond the intended buffer bounds, potentially revealing confidential information. The flaw is a classic memory disclosure flaw as defined by CWE‑125.

Affected Systems

Adobe’s Substance 3D Sampler is affected. No specific version numbers are listed, so all versions currently installed may be vulnerable until a patch is applied.

Risk and Exploitability

The CVSS score of 5.5 indicates a moderate risk. The EPSS score is less than 1%, showing that the likelihood of exploitation is currently very low. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires a user to open a malicious file, so it is a user‑interaction dependent flaw and does not allow remote or network‑only attacks.

Generated by OpenCVE AI on October 16, 2026 at 03:39 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest security update for Adobe Substance 3D Sampler as soon as it is available.
  • Restrict the opening of unknown or suspicious files within the application by disabling auto‑open features or using a sandboxed viewer.
  • Implement an antivirus or file‑scanning solution to inspect files before they are processed by the application.

Generated by OpenCVE AI on October 16, 2026 at 03:39 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 16 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe substance 3d Sampler
Vendors & Products Adobe
Adobe substance 3d Sampler

Wed, 14 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
Description Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Substance3D - Sampler | Out-of-bounds Read (CWE-125)
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}

Subscriptions

Adobe Substance 3d Sampler
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2026-10-14T14:53:06.368Z

Reserved: 2026-09-25T11:21:55.101Z

Link: CVE-2026-100131

cve-icon Vulnrichment

Updated: 2026-10-14T14:45:04.873Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-13T21:17:15.213

Modified: 2026-10-14T15:50:50.180

Link: CVE-2026-100131

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-16T20:45:16Z

Weaknesses