Product:
Substance3D – Designer
Summary
Substance3D – Designer versions 15.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-21338 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that, when opened by the victim using Substance3D – Designer, triggers the NULL Pointer Dereference. This action can lead to a crash of the application, resulting in denial-of-service for the user. The attacker must ensure that the victim interacts with the malicious file to successfully exploit the vulnerability.
Affected Products
- Substance3D – Designer versions 15.1.0 and earlier: Affected by a NULL Pointer Dereference vulnerability leading to potential application crashes.
Mitigation
To mitigate this vulnerability, users should avoid opening files from untrusted sources and ensure they are using the latest version of Substance3D – Designer. Adobe may release patches or updates to address this issue, so keeping the software up to date is crucial.