CVE-2026-21307

Substance3D - Designer versions 15.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21308 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer versions 15.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that...

CVE-2026-21308

CVE-2026-21308 affects Substance3D Designer versions 15.0.3 and earlier (per Red Hat and NVD entries) with an Out-of-bounds Read that could expose memory. The issue allows memory disclosure and requires user interaction: a victim must open a malicious file. Multiple connected advisories reference...

CVE-2026-21306

CVE-2026-21306 affects Adobe Substance 3D Sampler versions 5.1.0 and earlier. The issue is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Remediation is ava...

CVE-2026-21305 Substance3D - Painter | Out-of-bounds Write (CWE-787)

Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-2785

Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that ...

Adobe Substance3D Painter 缓冲区错误漏洞

Adobe Substance3D Painter is a 3D scene builder from Audobee Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Painter 11.0.3 and prior versions, which stems from an out-of-bounds write and could lead to the execution of arbitrary code...

APSB26-09 : Security update available for Adobe Substance 3D Stager

Adobe has released an update for Adobe Substance 3D Stager. This update addresses a critical vulnerability in Adobe Substance 3D Stager that could lead to arbitrary code execution...

APSB26-10 : Security update available for Adobe Substance 3D Painter

Adobe has released an update for Adobe Substance 3D Painter. This update addresses critical vulnerabilities in Adobe Substance 3D Painter. Successful exploitation could lead to arbitrary code execution...

APSB26-11 : Security update available for Adobe Substance 3D Sampler

Adobe has released an update for Adobe Substance 3D Sampler. This update addresses a critical vulnerability in Adobe Substance 3D Sampler. Successful exploitation could lead to arbitrary code execution...

PT-2026-2790

Substance3D - Designer versions 15.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Substance3D Sampler 缓冲区错误漏洞

Adobe Substance3D Sampler is a software for rendering 3D scenes from Audobee Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Sampler 5.1.0 and prior versions, which stems from an out-of-bounds write and could lead to the execution of arbitrary code...

APSB26-08 : Security update available for Adobe Substance 3D Modeler

Adobe has released an update for Adobe Substance 3D Modeler. This update addresses critical and important vulnerabilities in Adobe Substance 3D Modeler. Successful exploitation could lead to arbitrary code execution, memory exposure, and application denial-of-service...

Adobe Substance3D Stager Memory Misreference Vulnerability (CNVD-2025-29692)

Adobe Substance3D Stager is a set and rendering software for 3D scenes from the American company Audobee Adobe. A memory misreference vulnerability exists in Adobe Substance3D Stager, which can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

Adobe Substance3D Stager Out-of-Bounds Read Vulnerability

Adobe Substance3D Stager is a set and rendering software for 3D scenes from the American company Audobee Adobe. Adobe Substance3D Stager suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current user...

Adobe Substance 3D Stager < 3.1.6 Multiple Vulnerabilities (APSB25-113)

The version of Adobe Substance 3D Stager installed on the remote host is prior to 3.1.6. It is, therefore, affected by an multiple vulnerabilities as referenced in the APSB25-113 advisory. - Substance3D - Stager versions 3.1.5 and earlier are affected by an out-of-bounds read vulnerability when...

CVE-2025-61833 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

APSB25-113 : Security update available for Adobe Substance 3D Stager

Adobe has released an update for Adobe Substance 3D Stager. This update addresses critical vulnerabilities in Adobe Substance 3D Stager that could lead to arbitrary code execution...

Adobe Substance 3D Stager < 3.1.5 Multiple Vulnerabilities (APSB25-104)

The version of Adobe Substance 3D Stager installed on the remote host is prior to 3.1.5. It is, therefore, affected by an multiple vulnerabilities as referenced in the APSB25-104 advisory. - Substance3D - Stager versions 3.1.4 and earlier are affected by a Use After Free vulnerability that could...

CVE-2025-61805

Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...