CVE-2026-103823

Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in Substance3D Designer

Publication date: 2026-10-13

Last updated on: 2026-10-15

Assigner: Adobe Systems Incorporated

Description

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-103823

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	substance_3d_designer	to 16.0.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a stack-based buffer overflow in Adobe Substance 3D Designer. It allows an attacker to crash the application by exploiting a flaw in memory handling, leading to a denial-of-service condition. The attacker must trick a user into opening a specially crafted malicious file to trigger the issue.

Detection Guidance

Detection involves monitoring for crashes when opening files in Substance3D Designer. Check application logs for unexpected terminations or errors after file operations. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could cause the Adobe Substance 3D Designer application to crash, disrupting your workflow. Since it requires user interaction, you would need to open a malicious file for the attack to succeed. The impact is limited to application denial-of-service and does not directly compromise data or system integrity.

Mitigation Strategies

Update Substance3D Designer to the latest version. Avoid opening files from untrusted sources. Implement application allowlisting to restrict execution of unapproved files.

Hi! I’m here to help you understand CVE-2026-103823. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70