EUVD-2025-54260

Malicious code in formal-fuchsia-gayal npm...

CVE-2025-54260

creationtimestamp| type| source ---|---|--- 2025-09-10 02:24:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh6irpwto2a...

CVE-2025-54260

CVE-2025-54260 affects Adobe Substance3D Modeler up to version 1.22.2. The vulnerability is an out-of-bounds read that can occur while parsing a crafted file, potentially allowing code execution in the user’s context. Exploitation requires user interaction (victim opens a malicious file). The iss...