Product:
Substance3D – Designer
Summary
Substance3D – Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-34683 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious file that, when opened by the victim using Substance3D – Designer, triggers the out-of-bounds write condition. This requires the victim to be tricked into opening the file, leading to potential arbitrary code execution with the privileges of the current user.
Affected Products
- Substance3D – Designer versions 15.1.0 and earlier: Vulnerable to out-of-bounds write leading to arbitrary code execution.
Mitigation
Users are advised to avoid opening untrusted files in Substance3D – Designer and to update to the latest version to mitigate the risk of exploitation. Regularly checking for updates and applying security patches can help protect against this vulnerability.