Product:
Substance3D – Modeler
Summary
Substance3D – Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-21301 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that, when opened by the victim using the affected version of Substance3D – Modeler, triggers the NULL Pointer Dereference. This action can lead to a denial-of-service condition, causing the application to crash.
Affected Products
- Substance3D – Modeler versions 1.22.4 and earlier: Affected by a NULL Pointer Dereference vulnerability leading to potential application crashes.
Mitigation
Users are advised to avoid opening untrusted files in Substance3D – Modeler until a patch is applied. Adobe may release an update to address this vulnerability, so keeping the software up to date is essential.