CVE-2026-75749: Out-of-bounds Write (CWE-787) in Adobe Substance3D - Painter

CVE-2026-75749 is an out-of-bounds write vulnerability (CWE-787) in Adobe Substance3D - Painter. This flaw allows an attacker to write outside the intended memory bounds, potentially enabling arbitrary code execution in the context of the current user. Successful exploitation requires that the victim opens a crafted malicious file. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system under that user context. However, exploitation requires user interaction by opening a malicious file, limiting the attack vector to social engineering or targeted delivery.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources and follow best practices to avoid opening suspicious files.