CVE-2026-48431: Heap-based Buffer Overflow (CWE-122) in Adobe Adobe Substance 3D Designer

CVE-2026-48431 is a heap-based buffer overflow vulnerability (CWE-122) in Adobe Substance 3D Designer. Successful exploitation requires a victim to open a malicious file, potentially leading to arbitrary code execution with the privileges of the current user. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

If exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user, potentially leading to full compromise of the affected system depending on user privileges. The requirement for user interaction limits the attack vector to scenarios involving social engineering or delivery of malicious files.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources. No official fix or temporary mitigation has been published by Adobe at this time.