CVE-2026-48424
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
Risk Assessment
An attacker could gain control of the victim's system if they open a malicious file, potentially leading to data theft or malware installation.
Recommendation
It is recommended to update Substance3D - Sampler to the latest patched version immediately. Also, avoid opening files from untrusted sources.
Other vulnerabilities in Substance3D - Sampler
See all- CVE-2026-34674High
Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-71382High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - the victim must open a malicious file.
- CVE-2026-48425High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48423High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48422High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48421High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48420High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48419High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48418High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48417High
Substance3D - Sampler is affected by a stack-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
Original NVD description (English source)
Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.