CVE-2026-48428 - Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Back Back to CVE browser

HIGH

Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Published Aug 25, 2026

7.8

HIGH

CVSS 3.1

EPSS 0.34%

Description

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

Vendor Adobe Product Adobe Substance 3D Designer Default
affected
Affected
- ≥ 0, ≤ 16.0.4
Unaffected
- 16.0.5

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Adobe	Adobe Substance 3D Designer	affected	Affected ≥ 0, ≤ 16.0.4 Unaffected 16.0.5

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-122

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-65631
Advisory
https://helpx.adobe.com/security/products/substance3d_designer/apsb26-115.html
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-65631		Advisory
https://helpx.adobe.com/security/products/substance3d_designer/apsb26-115.html		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner adobe

Published Aug 25, 2026

Updated Aug 27, 2026

Reserved May 21, 2026

Link CVE-2026-48428

CISA Vulnrichment

Updated Aug 26, 2026

NVD

Status Analyzed

Modified Aug 28, 2026

Link CVE-2026-48428

Red Hat

No data

ENISA EUVD

Assigner adobe

Published Aug 25, 2026

Updated Aug 27, 2026

Link EUVD-2026-65631

GitHub

No data