Substance3D - Sampler vulnerabilities
16 known CVE vulnerabilities in Substance3D - Sampler, translated and rated.
- CVE-2026-34674High
Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-71382High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - the victim must open a malicious file.
- CVE-2026-48425High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48424High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48423High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48422High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48421High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48420High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48419High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48418High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48417High
Substance3D - Sampler is affected by a stack-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48306High
Substance3D Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).
- CVE-2026-48305High
Substance3D Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).
- CVE-2026-34710High
Substance3D Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).
- CVE-2026-34709High
Substance3D Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).
- CVE-2026-21306High
A vulnerability in Substance3D Sampler versions 5.1.0 and earlier is caused by an out-of-bounds write, which could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, as the victim must open a malicious file.

