CVE-2026-48379

Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result…

Risk score: 47/100
CVSS: 7.8 v3.1
Published: 27 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 7.8 high

References

https://www.adobe.com/trust/security/products/substance3d-painter/apsb26-178.html

Original description

Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Last activity 27 Oct 2026. Patch Forecast updates every hour.