Skip to content
AdobeCVE-2026-83959

Adobe Substance 3D Sampler: heap buffer overflow

High7.8CVE-2026-83959 · Published Sep 3, 2026 · updated Sep 8, 2026

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe advisory

Affected versions

PackageAffectedFixed in
Adobe Substance 3D Sampler
Product
<= 6.0.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-122

More Adobe advisories

All Adobe
Advisory
Adobe Commerce: cross-site scripting
Critical9.3Sep 8
Adobe Photoshop Android: path traversal
Medium5.0Sep 8
Adobe Photoshop Android: session fixation
High7.4Sep 8
Adobe Animate: code injection
High8.2Sep 8
Adobe Commerce: code execution
Critical10.0Sep 7
Adobe ColdFusion: improper authentication
High7.1Sep 3

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.