PT-2026-7389 · Adobe · Substance3D - Designer

Published 2026-02-10 · Updated 2026-02-10 · CVE-2026-21339

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Designer versions 15.1.0 and earlier

Description The software for 3D model texturing, Adobe Substance 3D Designer, has an issue involving reading beyond the allocated memory boundaries. Successful exploitation of this issue could allow an attacker to gain unauthorized access to protected information. This requires a user to open a specially crafted file.

Recommendations Update Adobe Substance 3D Designer to a version later than 15.1.0.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-01934

CVE-2026-21339

Affected Products

Substance3D - Designer

References · 4

• https://helpx.adobe.com/security/products/substance3d_designer/apsb26-19.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21339 · Security Note
• https://bdu.fstec.ru/vul/2026-01934 · Security Note
• https://osv.dev/vulnerability/CVE-2026-21339 · Vendor Advisory