Description
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-08-25
Score: 7.8 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Substance3D Sampler contains an out‑of‑bounds write flaw that permits a malicious file to corrupt memory, allowing the execution of arbitrary code within the privileges of the user who opens the file.

Affected Systems

Adobe Substance 3D Sampler is the affected product; specific product versions were not disclosed in the advisory.

Risk and Exploitability

The CVSS score of 7.8 marks the issue as high severity, and the vulnerability requires user interaction; a victim must deliberately open a crafted file. EPSS is not available, so the probability of exploitation cannot be quantified, and the flaw is not listed in the CISA KEV catalog. The current attacker model is local, relying on a compromised user to trigger the exploit, but the outcome is devastating in that it results in arbitrary code execution.

Generated by OpenCVE AI on August 25, 2026 at 20:38 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Acquire and install the latest Adobe Substance 3D Sampler update that contains the vendor fix.
  • Avoid opening or executing files from untrusted or unknown sources.
  • Run the application in a sandboxed or isolated environment to limit the impact of any potential exploit.

Generated by OpenCVE AI on August 25, 2026 at 20:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 25 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 25 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Description Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Substance3D - Sampler | Out-of-bounds Write (CWE-787)
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2026-08-25T19:00:02.113Z

Reserved: 2026-05-21T15:28:38.145Z

Link: CVE-2026-48419

cve-icon Vulnrichment

Updated: 2026-08-25T18:59:51.546Z

cve-icon NVD

Status : Received

Published: 2026-08-25T18:17:53.303

Modified: 2026-08-25T19:16:48.820

Link: CVE-2026-48419

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-25T20:45:04Z

Weaknesses