Live › vulnerability › CVE-2026-48380
Go to dashboardSubstance3D Painter has an out-of-bounds read flaw that can expose sensitive memory contents. An attacker can exploit it by getting a victim to open a malicious file.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
Teams that install Adobe Substance3D Painter on workstations and open untrusted project or asset files in it. Sources do not list affected or fixed versions. Teams that never open files from outside sources can treat this as low urgency.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
This page as .md · .json · in your agent: get_signal("CVE-2026-48380")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.