CVE-2026-100130

Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Read in Substance3D Sampler

Publication date: 2026-10-13

Last updated on: 2026-10-14

Assigner: Adobe Systems Incorporated

Description

Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-100130

Affected Vendors & Products

Vendor	Product	Version / Range
Adobe	Substance	3D Sampler 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

Substance3D Sampler has an out-of-bounds read vulnerability that allows reading beyond allocated memory. This could expose sensitive memory contents to an attacker. The issue requires a victim to open a specially crafted malicious file to trigger the flaw.

Detection Guidance

Detection may involve monitoring for suspicious file interactions or memory access patterns in Adobe Substance 3D Sampler. Check for crashes or unusual behavior when opening files. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to read sensitive memory, potentially gaining access to confidential data like credentials or personal information. Since user interaction is required, the risk depends on opening untrusted files.

Mitigation Strategies

Update Adobe Substance 3D Sampler to the latest version. Avoid opening untrusted files. Implement user awareness training to prevent malicious file execution.

Hi! I’m here to help you understand CVE-2026-100130. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70