CVE-2026-103824

Awaiting Analysis Awaiting Analysis - Queue

NULL Pointer Dereference in Adobe Substance3D Designer

Publication date: 2026-10-13

Last updated on: 2026-10-15

Assigner: Adobe Systems Incorporated

Description

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-103824

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	substance_3d_designer	to 16.0.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This is a NULL Pointer Dereference vulnerability in Adobe Substance 3D Designer. It allows an attacker to crash the application by exploiting a flaw that dereferences a null pointer, causing a denial-of-service condition. The attacker must trick a user into opening a specially crafted malicious file to trigger the issue.

Detection Guidance

Detection of this NULL Pointer Dereference vulnerability in Adobe Substance 3D Designer requires monitoring for application crashes when opening files. Check for unexpected termination logs or error messages in the application. No specific commands are provided in the context.

Impact Analysis

If you use Adobe Substance 3D Designer, an attacker could exploit this vulnerability to crash the application on your system. This would disrupt your workflow and prevent you from using the software until it is restarted or patched. No data loss or further compromise is indicated.

Mitigation Strategies

Immediate mitigation steps include avoiding opening untrusted files in Adobe Substance 3D Designer. Ensure the application is updated to the latest version once a patch is released. Monitor Adobe's security advisories for updates.

Hi! I’m here to help you understand CVE-2026-103824. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70