p PatchFirst

CVE-2026-103822

CVE-2026-103822 · Substance3D - Designer | Out-of-bounds Read (CWE-125)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 5.5 · Medium · EPSS 0.1% · Fix available

Published
Updated

Affected products and versions

  • substance 3d designer

    Versions
    • ≥ 0, ≤ 16.0.4 and prior: Affected (custom)
    • 16.0.7: Not affected (custom)

    Update to 16.0.7

Original sources

Check your server →