CVE-2026-48306: Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Synopsis

An out-of-bounds write vulnerability affects Adobe Substance3D - Sampler versions 6.0.0 and earlier. The attack is local and requires no prior authentication, but a victim must be tricked into opening a malicious file. Successful exploitation gives the attacker full code execution running as the current user, enabling complete read, write, and control of anything that user can access. HarborGuard is tracking this advisory and will make a patched-image rebuild available the moment Adobe publishes a fix.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network exposure is required to deliver the exploit.

• AuthenticationNot required

  No account or credentials are needed to exploit this vulnerability; the attack is carried out through a malicious file rather than an authenticated session.

• Victim interactionRequired

  A victim must be socially engineered into opening a crafted file, making this a user-driven trigger rather than a purely passive exposure.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and imposes no special environmental conditions, race timing, or memory layout requirements on the attacker.

Blast Radius

• The attacker executes arbitrary code running as the logged-in user, gaining full control of any process or file that user can access.
• Confidential files, credentials, and application data readable by that user account are exposed to the attacker.
• The attacker can write or overwrite files owned by that user, including configuration files, documents, and stored application state.
• The affected application and any dependent processes can be crashed or manipulated, disrupting the victim's local workstation.