Description
Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-08-25
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Arbitrary Code Execution
Action: Apply Patch
AI Analysis

Impact

Substance3D – Designer is affected by a heap‑based buffer overflow that can lead to arbitrary code execution in the context of the user. The vulnerability is a classic stack corruption flaw (CWE‑122). Exploitation requires the victim to open a crafted file, after which the attacker can run code with the same privileges as the user.

Affected Systems

Adobe Substance 3D Designer, but specific affected version information is not provided in the advisory.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity. No EPSS score is available, and the flaw is not listed in the CISA KEV catalog, suggesting limited or no public exploitation at this time. Because user interaction is required, the risk can be mitigated by avoiding malicious files and applying vendor updates.

Generated by OpenCVE AI on August 25, 2026 at 20:14 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Adobe Substance 3D Designer to the latest version once Adobe releases a patch for this issue.
  • Do not open potential malicious files from untrusted sources; verify the origin of any .sbs or related file before opening.
  • Run Substance 3D Designer within a sandboxed or isolated environment to contain any potential compromise.

Generated by OpenCVE AI on August 25, 2026 at 20:14 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 27 Aug 2026 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe substance 3d Designer
CPEs cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*
Vendors & Products Adobe
Adobe substance 3d Designer

Thu, 27 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 25 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Description Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
Weaknesses CWE-122
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

Adobe Substance 3d Designer
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2026-08-27T22:32:46.680Z

Reserved: 2026-05-21T15:28:38.145Z

Link: CVE-2026-48430

cve-icon Vulnrichment

Updated: 2026-08-27T16:14:48.599Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-25T18:17:54.947

Modified: 2026-08-28T00:18:00.840

Link: CVE-2026-48430

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-25T20:15:04Z

Weaknesses
  • CWE-122

    Heap-based Buffer Overflow