CVE-2026-34674: Heap-based Buffer Overflow (CWE-122) in Adobe Adobe Substance 3D Sampler

CVE-2026-34674 is a heap-based buffer overflow vulnerability in Adobe Substance 3D Sampler affecting versions 5.1.3 and earlier. Successful exploitation requires a victim to open a crafted malicious file, potentially allowing arbitrary code execution in the context of the current user. The vulnerability is classified under CWE-122 and has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation information is currently available, and there are no known exploits in the wild.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system. The attack requires user interaction, specifically opening a malicious file, which limits the attack vector to social engineering or targeted delivery.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources. Monitor Adobe's official channels for updates regarding patches or mitigations.