CVE Database

CVE-2026-103825 Medium · 5.5 CWE-125 Oct 13, 2026

Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103822 Medium · 5.5 CWE-125 Oct 13, 2026

Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-100131 Medium · 5.5 CWE-125 Oct 13, 2026

Substance3D - Sampler | Out-of-bounds Read (CWE-125)

Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-100130 Medium · 5.5 CWE-125 Oct 13, 2026

Substance3D - Sampler | Out-of-bounds Read (CWE-125)

Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-100126 Medium · 5.5 CWE-125 Oct 13, 2026

Bridge | Out-of-bounds Read (CWE-125)

Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103853 Medium · 5.5 CWE-125 Oct 13, 2026

Dimension | Out-of-bounds Read (CWE-125)

Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103850 Medium · 5.5 CWE-125 Oct 13, 2026

Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103842 High · 7.8 CWE-125 Oct 13, 2026

Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103841 High · 7.8 CWE-125 Oct 13, 2026

Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103840 High · 7.8 CWE-125 Oct 13, 2026

Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-97844 Medium · 6.5 CWE-125 Oct 13, 2026