Adobe Substance 3D Painter

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:adobe_substance_3d_painter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductAdobe Substance 3D Painter (cf09d474-b156-577b-a3ad-04522fb4e40d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-48379 vulnerable 2026-11-03 10:16:15.199698 Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)
HIGH (7.8)
Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-10-27T16:23:08.363Z
Updated: 2026-10-29T10:45:45.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48380 vulnerable 2026-11-03 10:16:14.921499 Substance3D - Painter | Out-of-bounds Read (CWE-125)
MEDIUM (5.5)
Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-10-27T16:23:08.580Z
Updated: 2026-10-28T16:16:04.990Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.