PT-2026-41384
CVE-2026-34674
·
Published
2026-05-12
·
Updated
2026-08-31
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Substance3D - Sampler versions 5.1.3 and earlier
Description
A heap-based buffer overflow occurs when an application writes more data to a heap memory buffer than it can hold. This issue allows for arbitrary code execution in the context of the current user, provided the victim opens a malicious file.
Recommendations
Update Substance3D - Sampler to a version later than 5.1.3.
Found an issue in the description? Have something to add? Feel free to write us 👾