PT-2025-38062

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.3 and earlier Description: Substance3D - Stager is affected by an out-of-bounds read issue when processing a specially crafted file. This can lead to reading beyond the boundaries of allocated memory...

CVE-2025-59332 3DAlloy allows stored XSS through attributes provided to the 3d parser tag/function

3DAlloy is a lightWeight 3D-viewer for MediaWiki. From 1.0 through 1.8, the parser tag and the 3d parser function allow users to provide custom attributes that are then appended to the canvas HTML element that is being output by the extension. The attributes are not sanitized, which means that...

CVE-2025-59332 3DAlloy allows stored XSS through attributes provided to the 3d parser tag/function

3DAlloy is a lightWeight 3D-viewer for MediaWiki. From 1.0 through 1.8, the parser tag and the 3d parser function allow users to provide custom attributes that are then appended to the canvas HTML element that is being output by the extension. The attributes are not sanitized, which means that...

CVE-2025-59332

3DAlloy (MediaWiki extension) versions 1.0–1.8 are affected by a stored XSS due to unsanitized attributes provided to the parser tag and the {{#3d}} function, which are appended to the canvas element and can execute arbitrary JavaScript. This root cause is confirmed across multiple feeds (Red Ha...

CVE-2025-59332 3DAlloy allows stored XSS through attributes provided to the 3d parser tag/function

3DAlloy is a lightWeight 3D-viewer for MediaWiki. From 1.0 through 1.8, the parser tag and the 3d parser function allow users to provide custom attributes that are then appended to the canvas HTML element that is being output by the extension. The attributes are not sanitized, which means that...

PT-2025-37757

Name of the Vulnerable Software and Affected Versions: 3DAlloy versions 1.0 through 1.8 Description: 3DAlloy is a lightWeight 3D-viewer for MediaWiki. The parser tag and the 3d parser function do not sanitize user-provided attributes, allowing arbitrary JavaScript to be inserted and executed when...

RHSA-2025:15407 Red Hat Security Advisory: qt5-qt3d security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: qt5-qt3d security update

An update for qt5-qt3d is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2025-54200

Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Malicious code in avalon-plugin-3d-extension (npm)

The package avalon-plugin-3d-extension was found to contain malicious code...

MAL-2025-15175 Malicious code in avalon-plugin-3d-extension (npm)

The package avalon-plugin-3d-extension was found to contain malicious code...

CVE-2025-54200

Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54187

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49573

Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54235 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54201 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49569

Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Substance3D Viewer 安全漏洞

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the context of the curre...

Linux Distros Unpatched Vulnerability : CVE-2024-42263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix potential memory leak in the timestamp extension If fetching of userspace memor...

Autodesk多款产品 安全漏洞

Autodesk Advance Steel and others are products of Autodesk, Inc. of the U.S. Autodesk Advance Steel is a suite of 3D modeling software for structural analysis of steel reinforcement.Autodesk AutoCAD is a suite of professional 3D drafting software.Autodesk Civil 3D is a suite of building informati...