CVE-2026-34683 is an out-of-bounds write vulnerability in Adobe Substance3D - Designer (version 15.1.0 and earlier). This flaw could enable an attacker to execute arbitrary code in the context of the current user if the victim opens a crafted malicious file. The vulnerability requires user interaction and does not escalate privileges or impact confidentiality or availability according to the CVSS vector. No official fix or patch has been published yet.

Successful exploitation could lead to arbitrary code execution with the privileges of the current user, potentially allowing an attacker to run malicious code on the affected system. However, exploitation requires the victim to open a malicious file, limiting the attack vector. There is no indication of privilege escalation, confidentiality loss, or availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources to avoid triggering this vulnerability.