CVE-2026-48379
EUVD-2026-11111627.10.2026, 17:17
Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| adobe | substance_3d_painter | 𝑥 ≤ 12.1.5 | CNA |
Common Weakness Enumeration