CVE-2026-21301

MediumCVSS 5.5

Published: 13/01/2026(UTC)Updated: 28/08/2026(UTC)Translated: 28/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. Exploitation requires user interaction – the victim must open a malicious file.

Risk Assessment

The risk involves the possibility of causing application crashes, which could disrupt user work and affect tool availability. The attack requires the user to open a malicious file.

Recommendation

It is recommended to update Substance3D - Modeler to the latest version with the fix. Users should also be educated not to open files from unknown sources.

Other vulnerabilities in Adobe Substance 3D Modeler

CVE-2026-21300Medium
Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. Exploitation requires user interaction – the victim must open a malicious file.

Original NVD description (English source)

Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS