Findings

CVE-2026-103822

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

Published Oct 13, 2026 · updated Oct 15, 2026 · adobe substance 3d designer

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · NIST NVD

    Detected

    Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  3. Oct 15, 2026 · NIST NVD

    Updated

    Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected

  • cpe adobe/substance 3d designerversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-103822

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-103822

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2026-103822

    Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must

    nvd.nist.gov

References