Priority LOW 36
Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00337 · Published 2026-08-27 · Fixed in 6.0 CWE-122
Priority LOW 36
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00337 · Published 2026-08-25 · Fixed in 12.1.3 CWE-122
Priority LOW 36
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00337 · Published 2026-08-25 · Fixed in 12.1.3 CWE-122
Priority LOW 36
Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00293 · Published 2026-08-25 · Fixed in 12.1.3 CWE-426
Priority LOW 36
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00337 · Published 2026-08-25 · Fixed in 12.1.3 CWE-122
Priority LOW 36
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00337 · Published 2026-08-25 · Fixed in 12.1.3 CWE-122
Priority LOW 36
Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00256 · Published 2026-08-25 · Fixed in 12.1.3 CWE-787
Priority LOW 24
Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00261 · Published 2026-08-25 · Fixed in 12.1.3 CWE-125
Priority LOW 36
Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00256 · Published 2026-08-25 · Fixed in 12.1.3 CWE-787
Priority LOW 35
Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00138 · Published 2026-05-12 · Fixed in 12.0.3 CWE-787
Priority LOW 35
Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00138 · Published 2026-05-12 · Fixed in 12.0.3 CWE-787
Priority LOW 24
Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00155 · Published 2026-03-10 · Fixed in 11.1.3 CWE-476
Priority LOW 24
Substance3D - Painter versions 11.1.2 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0017 · Published 2026-03-10 · Fixed in 11.1.3 CWE-125
Priority LOW 24
Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00155 · Published 2026-03-10 · Fixed in 11.1.3 CWE-476
Priority LOW 24
Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00155 · Published 2026-03-10 · Fixed in 11.1.3 CWE-476
Priority LOW 24
Substance3D - Painter versions 11.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0017 · Published 2026-03-10 · Fixed in 11.1.3 CWE-125
Priority LOW 24
Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00155 · Published 2026-03-10 · Fixed in 11.1.3 CWE-476
Priority LOW 24
Substance3D - Painter versions 11.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0017 · Published 2026-03-10 · Fixed in 11.1.3 CWE-125
Priority LOW 24
Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00155 · Published 2026-03-10 · Fixed in 11.1.3 CWE-476
Priority LOW 24
Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00155 · Published 2026-03-10 · Fixed in 11.1.3 CWE-476
Priority LOW 35
Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0017 · Published 2026-01-13 · Fixed in 11.1.2 CWE-787
Priority LOW 24
Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00212 · Published 2025-08-12 · No fix listed CWE-125
Priority LOW 24
Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00212 · Published 2025-08-12 · No fix listed CWE-125
Priority LOW 24
Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00212 · Published 2025-08-12 · No fix listed CWE-125
Priority LOW 35
Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00213 · Published 2025-08-12 · No fix listed CWE-787
Load more