CVE-2026-21334CWE-787

CVE-2026-21334

High · published February 10, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds write vulnerability in Substance3D - Designer could let attackers sneak in and execute arbitrary code, all thanks to a harmless-looking file! 🎨 Think of it like a painter who gets too carried away with their brush, accidentally splattering paint outside the canvas. Here, that oversight could allow malicious pixels to take over the entire artwork! If exploited, this vulnerability could pave the way for attackers to execute arbitrary code in the context of the current user. Imagine opening a file that seems safe, only to find it was a cleverly disguised trap allowing total control over your system!

Put simply

Think of it like a painter who gets too carried away with their brush, accidentally splattering paint outside the canvas. Here, that oversight could allow malicious pixels to take over the entire artwork! This out-of-bounds write issue occurs in Substance3D - Designer versions 15.1.0 and earlier, which means a malicious file can manipulate memory locations, potentially leading to code execution without proper checks.

What to do

If exploited, this vulnerability could pave the way for attackers to execute arbitrary code in the context of the current user. Imagine opening a file that seems safe, only to find it was a cleverly disguised trap allowing total control over your system! To protect yourself, update to Substance3D - Designer version 15.1.1 or later immediately. Encourage users not to open unknown files and consider implementing stronger security measures to mitigate risks. You've got this! With a quick update and awareness, your system will be more secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-10T23:16Z
Affected products (1)
ProductVersionsFixed in
adobe/substance_3d_designer< 15.1.215.1.2
References (1)
EPSS history
Timeline
  • 10 FEB 18:08Z
    Substance3D - Designer | Out-of-bounds Write (CWE-787)
    cvelistv5