Adobe Substance 3D Painter vulnerabilities

CVE-2026-21305 [HIGH] CWE-787 CVE-2026-21305: Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34675 [HIGH] CWE-787 CVE-2026-34675: Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34676 [HIGH] CWE-787 CVE-2026-34676: Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54187 [HIGH] CWE-787 CVE-2025-54187: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-47108 [HIGH] CWE-787 CVE-2025-47108: Substance3D - Painter versions 11.0.1 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 11.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-30322 [HIGH] CWE-787 CVE-2025-30322: Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-53958 [HIGH] CWE-787 CVE-2024-53958: Substance3D - Painter versions 10.1.1 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-30274 [HIGH] CWE-787 CVE-2024-30274: Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49522 [HIGH] CWE-787 CVE-2024-49522: Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47426 [HIGH] CWE-415 CVE-2024-47426: Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that c Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-30307 [HIGH] CWE-787 CVE-2024-30307: Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47427 [HIGH] CWE-787 CVE-2024-47427: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47429 [HIGH] CWE-787 CVE-2024-47429: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49519 [HIGH] CWE-787 CVE-2024-49519: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47430 [HIGH] CWE-787 CVE-2024-47430: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47433 [HIGH] CWE-787 CVE-2024-47433: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47428 [HIGH] CWE-787 CVE-2024-47428: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49518 [HIGH] CWE-787 CVE-2024-49518: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47434 [HIGH] CWE-787 CVE-2024-47434: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49520 [HIGH] CWE-787 CVE-2024-49520: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.