Skip to main content

Substance 3d Painter CVE-2026-34676

| EUVDEUVD-2026-29620 HIGH
Out-of-bounds Write (CWE-787)
2026-05-12 psirt@adobe.com GHSA-6hr9-7v6j-hv4m
Memory Corruption Buffer Overflow RCE Substance 3d Painter
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 12, 2026 - 18:17 nvd
HIGH 7.8

DescriptionCVE.org

Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Analysis

Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

More in Substance 3d Painter

View all
CVE-2025-30322 HIGH
7.8 May 13

Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result i
CVE-2025-47108 HIGH
7.8 Jun 10

CVE-2025-47108 is an out-of-bounds write vulnerability in Adobe Substance3D Painter versions 11.0.1 and earlier that all
CVE-2026-21305 HIGH
7.8 Jan 13

Arbitrary code execution in Adobe Substance 3D Painter versions 11.0.3 and earlier through an out-of-bounds write flaw a
CVE-2026-34675 HIGH
7.8 May 12

Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result
CVE-2024-53958 HIGH
7.8 Dec 10

Substance3D - Painter versions 10.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result
CVE-2024-53957 HIGH
7.8 Dec 10

Substance3D - Painter versions 10.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could

CVE-2024-49525 HIGH
7.8 Nov 12

Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could

CVE-2024-49520 HIGH
7.8 Nov 12

Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result
CVE-2024-49519 HIGH
7.8 Nov 12

Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result
CVE-2024-49518 HIGH
7.8 Nov 12

Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result
CVE-2024-49517 HIGH
7.8 Nov 12

Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could

CVE-2024-49516 HIGH
7.8 Nov 12

Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result

Same weakness CWE-787 – Out-of-bounds Write

View all
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2012-1889 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8
CVE-2014-1761 HIGH POC
7.8
CVE-2009-3129 HIGH POC
7.8
CVE-2021-1732 HIGH POC
7.8
CVE-2013-3346 CRITICAL POC
9.8

Same technique Memory Corruption

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2014-0322 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-4792 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2026-34676 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy