CVE-2025-21167

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-21167

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-21168

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-21168 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-21167 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-21167 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

PT-2025-28495 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Substance3D - Designer versions 14.1 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An out-of-bounds read vulnerability exists in Adobe After Effects version...

PT-2025-28741 · Adobe · Substance3D - Viewer

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.22 and earlier Description: The issue is an out-of-bounds read that could lead to disclosure of sensitive memory. Exploitation requires user interaction, where a victim must open a malicious file...

Adobe Dimension < 4.1.3 Multiple Vulnerabilities (APSB25-63)

The version of Adobe Dimension installed on the remote Windows host is prior to 4.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-63 advisory. - Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in...

PT-2025-28498 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: After Effects versions 25.2, 24.6.6 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Adobe After Effects < 24.6.7 / 25.0 < 25.3 Multiple Vulnerabilities (APSB25-49)

The version of Adobe After Effects installed on the remote Windows host is prior to 24.6.7, 25.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-49 advisory. - After Effects versions 25.2, 24.6.6 and earlier are affected by an out-of-bounds read vulnerability...

PT-2025-28640 · Dimension · Dimension

Name of the Vulnerable Software and Affected Versions: Dimension versions 4.1.2 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitati...

PT-2025-28496 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Substance3D - Designer versions 14.1 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Adobe Dimension < 4.1.3 Multiple Vulnerabilities (APSB25-63) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 4.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-63 advisory. - Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in...

Adobe FrameMaker 2020 < 16.0.9 (2020.0.9) / Adobe FrameMaker 2022 < 17.0.7 (2022.0.7) Multiple Vulnerabilities (APSB25-66)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.9 / Adobe FrameMaker 2022 17.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-66 advisory. - Adobe Framemaker versions 2020.8, 2022.6 and earlier are...

PT-2025-28787 · Adobe · Illustrator 29.5.1 +1

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.6 and earlier Illustrator version 29.5.1 and earlier Description: Illustrator versions 28.7.6 and earlier, and version 29.5.1 and earlier, are affected by an out-of-bounds read issue that may result in the disclosure...

webkitgtk: memory disclosure issue was addressed with improved memory handling

A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution...

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents

A use-after-free vulnerability was found in the SVG implementation within WebKitGTK. This flaw allows remote attackers to exploit the removal of an SVGFontFaceElement object, which occurs through specific vectors that trigger the deletion of the object during rendering...

webkitgtk: Out-of-bounds read leading to memory disclosure

An out-of-bounds read flaw was found in WebKitGTK. A specially crafted audio file could use this flaw to trigger a disclosure of memory when processed...