CVE-2025-61806 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2025-61806

Substance3D Stager, versions 3.1.4 and earlier, are affected by an out-of-bounds read (CVE-2025-61806) while parsing a crafted file, potentially allowing code execution in the user’s context. Exploitation requires the user to open a malicious file. Connected advisories (APSB25-104) indicate this ...

CVE-2025-61806 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2025-61799 Dimension | Out-of-bounds Read (CWE-125)

Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2025-61799

CVE-2025-61799 affects Adobe Dimension

CVE-2025-61799 Dimension | Out-of-bounds Read (CWE-125)

Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2025-61798

CVE-2025-61798 affects Adobe Dimension versions 4.1.4 and earlier. It is an out-of-bounds read vulnerability in the parser for a crafted file, potentially allowing code execution in the context of the current user. Exploitation requires user interaction (the victim opens a malicious file). Connec...

CVE-2025-61798 Dimension | Out-of-bounds Read (CWE-125)

Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2025-61801 Dimension | Use After Free (CWE-416)

Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-61800

Adobe Dimension is affected by CVE-2025-61800: Dimension versions 4.1.4 and earlier suffer from an Integer Overflow or Wraparound vulnerability that could enable arbitrary code execution in the current user context. Exploitation requires user interaction, specifically the victim opening a malicio...

CVE-2025-54283

CVE-2025-54283 affects Adobe Illustrator versions 29.7, 28.7.9 and earlier. The issue is an out-of-bounds write in the renderer that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a specially crafted malicious fi...

CVE-2025-54284 Illustrator | Out-of-bounds Write (CWE-787)

Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54284 Illustrator | Out-of-bounds Write (CWE-787)

Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54284

Adobe Illustrator CVE-2025-54284 describes an out-of-bounds write vulnerability affecting Illustrator versions 29.7, 28.7.9 and earlier, allowing arbitrary code execution in the current user context. Exploitation requires a user to open a malicious file. Connected sources corroborate the issue an...

CVE-2025-54282 Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)

Adobe Framemaker versions 2020.9, 2022.7 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54282

CVE-2025-54282 affects Adobe FrameMaker 2020.9, 2022.7 and earlier. The issue is a Heap-based Buffer Overflow in Framemaker that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a specially crafted malicious file...

CVE-2025-54281 Adobe Framemaker | Use After Free (CWE-416)

Adobe Framemaker versions 2020.9, 2022.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54274

Substance3D - Viewer versions 0.25.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54280

Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54275

Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to crash the application or make it unavailable. Exploitation of this issue requires user interacti...