CVE-2026-71382
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - the victim must open a malicious file.
Risk Assessment
Risk of arbitrary code execution on the user's machine, potentially leading to system compromise and access to sensitive data.
Recommendation
It is recommended to update Substance3D - Sampler to a patched version and exercise caution when opening files from unknown sources.
Other vulnerabilities in Substance3D - Sampler
See all- CVE-2026-34674High
Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-48425High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48424High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48423High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48422High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48421High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48420High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48419High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48418High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48417High
Substance3D - Sampler is affected by a stack-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
Original NVD description (English source)
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.