Skip to content
AdobeCVE-2026-34674

Adobe Substance 3D Sampler: heap buffer overflow

High7.8CVE-2026-34674 · Published Aug 27, 2026 · updated Aug 31, 2026

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe advisory

Affected versions

PackageAffectedFixed in
Adobe Substance 3D Sampler
Product
<= 5.1.3No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-122

More Adobe advisories

All Adobe
Advisory
Adobe DNG Software Development Kit (SDK): out-of-bounds write
Medium5.5Aug 27
Adobe DNG Software Development Kit (SDK): out-of-bounds read
Medium5.5Aug 27
Adobe Campaign Classic: command injection
Critical10.0Aug 25
Adobe C2PA Tool: improper input validation
Medium5.5Aug 25
Adobe Substance3D - Painter: untrusted search path
High7.8Aug 25
Adobe Substance3D - Painter: heap buffer overflow
High7.8Aug 25

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.