CVE-2026-71382: Out-of-bounds Write (CWE-787) in Adobe Adobe Substance 3D Sampler

CVE-2026-71382 is an out-of-bounds write vulnerability in Adobe Substance 3D Sampler. This flaw could lead to arbitrary code execution in the context of the current user if a victim opens a specially crafted malicious file. The vulnerability requires user interaction and has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. No patch or official remediation has been published yet, and there are no known exploits in the wild.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. The attack requires user interaction (opening a malicious file), which limits the attack vector to social engineering or targeted delivery.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening untrusted files with Adobe Substance 3D Sampler and follow standard security best practices to reduce risk.