Product:
Substance3D – Modeler
Summary
Substance3D – Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-21300 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that, when opened by the victim using the affected version of Substance3D – Modeler, triggers the NULL Pointer Dereference. This action can lead to a denial-of-service condition, causing the application to crash.
Affected Products
- Substance3D – Modeler versions 1.22.4 and earlier: Affected by a NULL Pointer Dereference vulnerability leading to potential application crashes.
Mitigation
To mitigate this vulnerability, users should avoid opening files from untrusted sources and ensure they are using the latest version of Substance3D – Modeler, which may contain patches for this issue.