Live › vulnerability › CVE-2026-48379
Go to dashboardSubstance3D Painter has a stack-based buffer overflow that can be triggered by opening a crafted file. A successful attack runs arbitrary code with the privileges of the current user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
Teams whose designers or artists open third-party or untrusted files in Substance3D Painter on their workstations. Systems that never open external files in Painter are less exposed, but the sources do not list affected versions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Substance 3D Painter | vendor | unknown | – |
12.1.3 or earlier as possibly affectedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
This page as .md · .json · in your agent: get_signal("CVE-2026-48379")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.