Substance 3D Designer contains a stack-based buffer overflow that allows an attacker to crash the application. The vulnerability is described as leading to a denial‑of‑service condition, and there is no indication that it enables code execution. The weakness corresponds to CWE-121, a classic stack corruption scenario.

Adobe’s Substance 3D Designer software is affected. No specific version information was supplied, so all current and prior releases should be considered potentially vulnerable until an advisory confirms specific releases.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1 % suggests low likelihood of exploitation. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires a victim to open a specially crafted file. The likely attack vector is local file exploitation requiring user interaction; this inference is drawn from the requirement that the attacker supply a malicious file that the user opens. Because the flaw only causes a denial of service, the risk of serious compromise is low, but repeated crashes can degrade availability.