Product:
Substance3D – Painter
Summary
Substance3D – Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to its availability. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-27215 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that, when opened by the victim using Substance3D – Painter, triggers the NULL Pointer Dereference. This requires the victim to be tricked into opening the file, leading to a crash of the application and resulting in denial-of-service.
Affected Products
- Substance3D – Painter versions 11.1.2 and earlier: Affected by a NULL Pointer Dereference vulnerability that can lead to application crashes.
Mitigation
To mitigate this vulnerability, users should avoid opening untrusted or suspicious files in Substance3D – Painter. It is also recommended to update to the latest version of the software where possible to ensure that any security patches are applied.