Adobe Substance 3D Sampler vulnerabilities

44 vulnerabilities

Known vulnerabilities in Adobe Substance 3D Sampler, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8HighCVE-2026-83966adobe · substance_3d_samplerSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.19%7.8HighCVE-2026-83965adobe · substance_3d_samplerSubstance3D - Sampler | Stack-based Buffer Overflow (CWE-121)Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.25%5.5MediumCVE-2026-100131adobe · substance_3d_samplerSubstance3D - Sampler | Out-of-bounds Read (CWE-125)Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.15%5.5MediumCVE-2026-100130adobe · substance_3d_samplerSubstance3D - Sampler | Out-of-bounds Read (CWE-125)Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.15%5.5MediumCVE-2025-54205adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Read (CWE-125)Substance3D - Sampler versions 5.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.19%7.8HighCVE-2025-43581adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.27%7.8HighCVE-2025-43588adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.27%7.8HighCVE-2025-24440adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.24%7.8HighCVE-2025-24442adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%7.8HighCVE-2025-24444adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%7.8HighCVE-2025-24441adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%7.8HighCVE-2025-24445adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%7.8HighCVE-2025-24443adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.28%7.8HighCVE-2025-24439adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.29%7.8HighCVE-2024-52996adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.38%7.8HighCVE-2024-52994adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.33%7.8HighCVE-2024-52995adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.38%5.5MediumCVE-2024-41860adobe · substance_3d_sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Vulnerability I, when parsing PSD fileSubstance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%5.5MediumCVE-2024-41861adobe · substance_3d_sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD fileSubstance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%5.5MediumCVE-2024-41863adobe · substance_3d_sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability III, when parsing DNG fileSubstance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%