Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

87 records

Priority LOW 36

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00337 Published 2026-08-27 Fixed in 6.0 CWE-122
Priority LOW 36

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00337 Published 2026-08-25 Fixed in 12.1.3 CWE-122
Priority LOW 36

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00337 Published 2026-08-25 Fixed in 12.1.3 CWE-122
Priority LOW 36

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00293 Published 2026-08-25 Fixed in 12.1.3 CWE-426
Priority LOW 36

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00337 Published 2026-08-25 Fixed in 12.1.3 CWE-122
Priority LOW 36

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00337 Published 2026-08-25 Fixed in 12.1.3 CWE-122
Priority LOW 36

Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00256 Published 2026-08-25 Fixed in 12.1.3 CWE-787
Priority LOW 24

Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00261 Published 2026-08-25 Fixed in 12.1.3 CWE-125
Priority LOW 36

Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00256 Published 2026-08-25 Fixed in 12.1.3 CWE-787
Priority LOW 35

Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00138 Published 2026-05-12 Fixed in 12.0.3 CWE-787
Priority LOW 35

Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00138 Published 2026-05-12 Fixed in 12.0.3 CWE-787
Priority LOW 24

Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00155 Published 2026-03-10 Fixed in 11.1.3 CWE-476
Priority LOW 24

Substance3D - Painter versions 11.1.2 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0017 Published 2026-03-10 Fixed in 11.1.3 CWE-125
Priority LOW 24

Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00155 Published 2026-03-10 Fixed in 11.1.3 CWE-476
Priority LOW 24

Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00155 Published 2026-03-10 Fixed in 11.1.3 CWE-476
Priority LOW 24

Substance3D - Painter versions 11.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0017 Published 2026-03-10 Fixed in 11.1.3 CWE-125
Priority LOW 24

Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00155 Published 2026-03-10 Fixed in 11.1.3 CWE-476
Priority LOW 24

Substance3D - Painter versions 11.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0017 Published 2026-03-10 Fixed in 11.1.3 CWE-125
Priority LOW 24

Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00155 Published 2026-03-10 Fixed in 11.1.3 CWE-476
Priority LOW 24

Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00155 Published 2026-03-10 Fixed in 11.1.3 CWE-476
Priority LOW 35

Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0017 Published 2026-01-13 Fixed in 11.1.2 CWE-787
Priority LOW 24

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00212 Published 2025-08-12 No fix listed CWE-125
Priority LOW 24

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00212 Published 2025-08-12 No fix listed CWE-125
Priority LOW 24

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00212 Published 2025-08-12 No fix listed CWE-125
Priority LOW 35

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00213 Published 2025-08-12 No fix listed CWE-787
Load more