CVE-2026-103827

Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in Substance3D Designer

Publication date: 2026-10-13

Last updated on: 2026-10-15

Assigner: Adobe Systems Incorporated

Description

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-103827

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	substance_3d_designer	to 16.0.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a Stack-based Buffer Overflow vulnerability in Adobe Substance3D Designer. It allows an attacker to crash the application by exploiting a buffer overflow, leading to a denial-of-service condition. The attacker must trick a victim into opening a specially crafted malicious file to trigger the issue.

Detection Guidance

Detection involves monitoring for crashes when opening files in Substance3D Designer. Check application logs for unexpected terminations or buffer overflow errors. No specific commands are provided in the context.

Impact Analysis

If you use Adobe Substance3D Designer, an attacker could exploit this vulnerability to crash the application. This could disrupt your workflow and cause loss of unsaved work. The attack requires user interaction, meaning you must open a malicious file for it to work.

Mitigation Strategies

Apply the latest security patches from Adobe for Substance3D Designer. Avoid opening untrusted files. Disable automatic file opening features if possible. Monitor Adobe's security advisories for updates.

Hi! I’m here to help you understand CVE-2026-103827. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70