CVE-2026-83966
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - a victim must open a malicious file.
Risk Assessment
A user could be infected by a malicious file, potentially leading to session takeover and data theft.
Recommendation
Update Substance3D - Sampler to the latest version and educate users about the risks of opening unknown files.
Other vulnerabilities in Substance3D - Sampler
See all- CVE-2026-83965High
Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - a victim must open a malicious file.
- CVE-2026-100131Medium
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction in that a victim must open a malicious file.
- CVE-2026-100130Medium
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction in that a victim must open a malicious file.
- CVE-2026-83959High
Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction – the victim must open a malicious file.
- CVE-2026-34674High
Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-71382High
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - the victim must open a malicious file.
- CVE-2026-48425High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48424High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48423High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
- CVE-2026-48422High
Substance3D - Sampler is affected by a heap-based buffer overflow vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
Original NVD description (English source)
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

