CVE-2025-43582 Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Viewer versions 0.22 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user, scope unchanged. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-43582

CVE-2025-43582 affects Substance3D Viewer versions 0.22 and earlier. The vulnerability is a heap-based buffer overflow caused by a partial overwrite of heap memory, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a m...

CVE-2025-49537 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead to arbitrary code execution by a high-privileged attacker. Exploitation of this issue requires user...

CVE-2025-49537 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead to arbitrary code execution by a high-privileged attacker. Exploitation of this issue requires user...

CVE-2025-49537

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead to arbitrary code execution by a high-privileged attacker. Exploitation of this issue requires user...

CVE-2025-49537

CVE-2025-49537 concerns Adobe ColdFusion. Affected are ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier, where an OS Command Injection flaw could allow arbitrary code execution by a high-privileged attacker. Exploitation requires user interaction, and the vulnerable component is restricte...

CVE-2025-30312

CVE-2025-30312 affects Dimension versions 4.1.2 and earlier. The issue is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user, with exploitation requiring the victim to open a malicious file. Multiple connected sources confirm the affected...

CVE-2025-47109

After Effects versions 25.2, 24.6.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires use...

CVE-2025-43587

After Effects versions 25.2, 24.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-43580

Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the application or disrupt its functionality. Exploitation of this...

CVE-2025-43580

Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the application or disrupt its functionality. Exploitation of this...

CVE-2025-21167

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-21165

Substance3D Designer (v14.1 and earlier) is affected by an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The issue is fixed by updating to a ver...

CVE-2025-21166

CVE-2025-21166 affects Substance3D Designer, version 14.1 and earlier. The issue is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. Documented impact is hi...

CVE-2025-21167 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-21164

CVE-2025-21164 affects Substance3D Designer, versions 14.1 and earlier. The issue is an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the context of the current user, and exploitation requires the victim to open a malicious file. Remediation from the connected PT sec...

CVE-2025-43580

Adobe Audition is affected by CVE-2025-43580 (Access of Memory Location After End of Buffer) in versions 25.2, 24.6.3 and earlier, potentially allowing a denial-of-service. The issue requires a user to open a malicious file. Connected sources confirm the affected versions and the vulnerability cl...

PT-2025-28758

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 24.0 and earlier Description: Adobe Connect versions 24.0 and earlier are susceptible to a Deserialization of Untrusted Data issue. Successful exploitation of this issue could allow an attacker to execute arbitrary code...

PT-2025-28783 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8, 2022.6 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

PT-2025-28711 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit the issue, as...