๐Ÿ” CVE Alert

CVE-2026-75767

HIGH 7.8

Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

CVSS Score
7.8
EPSS Score
0.2%
EPSS Percentile
8th

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CWE CWE-122
Vendor adobe
Product substance3d - painter
Ecosystems
Industries
TechnologyMedia
Published Aug 25, 2026
Last Updated Aug 27, 2026
Stay Ahead of the Next One

Get instant alerts for adobe substance3d - painter

Be the first to know when new high vulnerabilities affecting adobe substance3d - painter are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Adobe / Substance3D - Painter
0 โ‰ค 12.1.2

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
helpx.adobe.com: https://helpx.adobe.com/security/products/substance3d_painter/apsb26-129.html