Adobe Substance 3D Sampler vulnerabilities

CVE-2026-21306 [HIGH] CWE-787 CVE-2026-21306: Substance3D - Sampler versions 5.1.0 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 5.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54205 [MEDIUM] CWE-125 CVE-2025-54205: Substance3D - Sampler versions 5.0.3 and earlier are affected by an out-of-bounds read vulnerability Substance3D - Sampler versions 5.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-43581 [HIGH] CWE-787 CVE-2025-43581: Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-43588 [HIGH] CWE-787 CVE-2025-43588: Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24441 [HIGH] CWE-787 CVE-2025-24441: Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24442 [HIGH] CWE-787 CVE-2025-24442: Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24439 [HIGH] CWE-122 CVE-2025-24439: Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24440 [HIGH] CWE-787 CVE-2025-24440: Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24444 [HIGH] CWE-787 CVE-2025-24444: Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24445 [HIGH] CWE-787 CVE-2025-24445: Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24443 [HIGH] CWE-122 CVE-2025-24443: Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-52996 [HIGH] CWE-122 CVE-2024-52996: Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-52994 [HIGH] CWE-787 CVE-2024-52994: Substance3D - Sampler versions 4.5.1 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-52995 [HIGH] CWE-122 CVE-2024-52995: Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47459 [MEDIUM] CWE-476 CVE-2024-47459: Substance3D - Sampler versions 4.5 and earlier are affected by a NULL Pointer Dereference vulnerabil Substance3D - Sampler versions 4.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue requires user interaction in that a victim must open a malic

CVE-2024-41862 [MEDIUM] CWE-125 CVE-2024-41862: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability t Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-41860 [MEDIUM] CWE-125 CVE-2024-41860: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability t Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-41863 [MEDIUM] CWE-125 CVE-2024-41863: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability t Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-41861 [MEDIUM] CWE-125 CVE-2024-41861: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability t Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-48626 [HIGH] CWE-787 CVE-2023-48626: Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnera Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.