CVE-2025-54226

Summary: InDesign Desktop versions 20.4 and earlier (including 19.5.4 and earlier) are affected by a Use After Free vulnerability (CWE-416) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). The issue is...

CVE-2025-54228

CVE-2025-54228 affects Adobe InDesign Desktop versions 20.4, 19.5.4 and earlier. The issue is an out-of-bounds read vulnerability that could disclose sensitive memory. Exploitation requires user interaction: a victim must open a malicious file. Remediation is available: Adobe’s APSB25-79 security...

CVE-2025-54228 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54212 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54212

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54212 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54212

Adobe InDesign Desktop CVE-2025-54212 is a heap-based buffer overflow affecting InDesign Desktop up to version 20.4 and 19.5.4 and earlier, enabling arbitrary code execution in the current user context when a user opens a crafted file. Exploitation requires user interaction. Adobe/APSB25-79 notes...

CVE-2025-54206

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54206 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54206 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54206

CVE-2025-54206 affects Adobe InDesign Desktop. Versions 20.4 and earlier, and 19.5.4 and earlier are vulnerable to an out-of-bounds write that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file). C...

CVE-2025-54205 Substance3D - Sampler | Out-of-bounds Read (CWE-125)

Substance3D - Sampler versions 5.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54205 Substance3D - Sampler | Out-of-bounds Read (CWE-125)

Substance3D - Sampler versions 5.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54205

Adobe Substance 3D Sampler is affected by an out-of-bounds read (CWE-125) in versions 5.0.3 and earlier. The root cause is an out-of-bounds memory read that could lead to disclosure of sensitive memory; exploitation requires a user to open a malicious file. The vulnerability is documented across ...

CVE-2025-54188 Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54188 Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54188

CVE-2025-54188 affects Substance3D Painter up to version 11.0.2. It is an out-of-bounds read that could disclose memory contents; exploitation requires the user to open a malicious file (UI interaction, local attack vector). The CVE has a CVSS v3.1 base score of 5.5 (Medium), with confidentiality...

CVE-2025-54193

Substance3D Painter is affected in versions 11.0.2 and earlier by an out-of-bounds read vulnerability that could disclose sensitive memory. Exploitation requires user interaction (victim opens a malicious file). The CVE is CVE-2025-54193. Multiple sources corroborate the affected version range an...

CVE-2025-54193 Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54193 Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...