CVE-2026-34674

Analyzed Analyzed - Analysis Complete

Heap-based Buffer Overflow in Substance3D Sampler

Publication date: 2026-08-27

Last updated on: 2026-08-31

Assigner: Adobe Systems Incorporated

Description

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-27

Last Modified

2026-08-31

Generated

2026-09-17

AI Q&A

2026-08-27

EPSS Evaluated

2026-09-15

NVD

CVE-2026-34674

EUVD

EUVD-2026-67082

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	substance_3d_painter	to 5.1.3 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

This is a Heap-based Buffer Overflow vulnerability in Adobe Substance3D Sampler versions 5.1.3 and earlier. It allows arbitrary code execution in the context of the current user if a victim opens a malicious file.

Detection Guidance

Detection requires checking installed versions of Adobe Substance3D Sampler. Use commands like 'substance3d_sampler --version' or inspect installed programs via system package managers. Vulnerable versions are 5.1.3 and earlier.

Impact Analysis

An attacker could exploit this to run malicious code on your system, potentially stealing data, installing malware, or taking control of your computer. User interaction is required to open a harmful file.

Compliance Impact

This vulnerability could lead to arbitrary code execution, potentially allowing unauthorized access to sensitive data. For GDPR, this may result in data breaches requiring notification under Article 33. For HIPAA, it could compromise protected health information, violating the Security Rule. Organizations using affected versions must assess impact and implement mitigations to maintain compliance.

Mitigation Strategies

Update Adobe Substance3D Sampler to the latest version. Avoid opening untrusted files. Disable automatic file opening features if possible. Monitor Adobe's security advisories for patches.

Hi! I’m here to help you understand CVE-2026-34674. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70