Product:
Substance3D – Modeler
Summary
Substance3D – Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-21302 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that, when opened by the victim using Substance3D – Modeler, triggers the out-of-bounds read condition. This requires the victim to interact with the file, which could lead to the disclosure of sensitive information stored in memory.
Affected Products
- Substance3D – Modeler versions 1.22.4 and earlier: Affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.
Mitigation
Users are advised to avoid opening untrusted files in Substance3D – Modeler until a patch is applied. Adobe may release an update to address this vulnerability, and users should ensure they are using the latest version of the software.