CVE-2026-21301
Medium
Low
Medium
High
Critical
5.5
CVSS Score
Published: Jan 13, 2026
Last Modified: Jan 14, 2026
Vulnerability Description
Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Metrics
Common Vulnerability Scoring System
Vector String:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
L
Attack Complexity
L
Privileges Required
N
User Interaction
R
Scope
U
Confidentiality
N
Integrity
N
Availability
H
Severity Details
5.5
out of 10.0
Medium
Key Information
- Published Date
- January 13, 2026
