CVE-2026-34683 is an out-of-bounds write vulnerability in Adobe Substance3D - Designer (version 15.1.0 and earlier). This flaw allows an attacker to execute arbitrary code within the context of the current user after the victim opens a specially crafted malicious file. The vulnerability is classified under CWE-787 and has a CVSS 3.1 base score of 7.8, indicating high severity. The attack vector requires local user interaction (AV:L/UI:R), with low attack complexity and no privileges required. The vendor has not provided an official fix or remediation level as of the publication date.

Successful exploitation can result in arbitrary code execution with full impact on confidentiality, integrity, and availability of the affected system under the current user's privileges. This could allow attackers to execute malicious code, potentially leading to system compromise or data loss. However, exploitation requires the victim to open a malicious file, limiting the attack vector to social engineering or targeted delivery.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening files from untrusted or unknown sources in Adobe Substance3D - Designer. Monitor Adobe's official channels for updates regarding patches or mitigations.