CVE-2025-27165 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-27165

CVE-2025-27165 affects Substance3D - Stager up to version 3.1.2 (and earlier). It is an out-of-bounds read vulnerability that could disclose memory and requires user interaction (victim opens a malicious file). Public sources reference APSB25-64 and advisories, with remediation guidance indicatin...

CVE-2025-43584

Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-43584 Substance3D - Viewer | Out-of-bounds Read (CWE-125)

Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-43584 Substance3D - Viewer | Out-of-bounds Read (CWE-125)

Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-47135

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

CVE-2025-47135 Dimension | Out-of-bounds Read (CWE-125)

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

CVE-2025-47135 Dimension | Out-of-bounds Read (CWE-125)

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

CVE-2025-21167

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-21168

CVE-2025-21168 affects Substance3D Designer (versions 14.1 and earlier). The root cause is an out-of-bounds read in the product, which could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a malicious file. Affected software is Sub...

CVE-2025-21168 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-21167

CVE-2025-21167 affects Substance3D Designer ≤ 14.1. It is an out-of-bounds read vulnerability that can disclose memory contents and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a malicious file. Affected component/impact: memory disclosure with high confiden...

CVE-2025-43587 After Effects | Out-of-bounds Read (CWE-125)

After Effects versions 25.2, 24.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-43587

CVE-2025-43587 affects Adobe After Effects up to versions 25.2, 24.6.6 and earlier. The issue is an out-of-bounds read in After Effects components that can disclose memory contents and potentially bypass mitigations such as ASLR. Exploitation requires user interaction: a victim must open a malici...

PT-2025-28741 · Adobe · Substance3D - Viewer

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.22 and earlier Description: The issue is an out-of-bounds read that could lead to disclosure of sensitive memory. Exploitation requires user interaction, where a victim must open a malicious file...

Adobe Dimension < 4.1.3 Multiple Vulnerabilities (APSB25-63)

The version of Adobe Dimension installed on the remote Windows host is prior to 4.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-63 advisory. - Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in...

CVE-2025-49525: Out-of-bounds Read

Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2025-28770 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.6 and earlier Illustrator version 29.5.1 and earlier Description: Illustrator versions 28.7.6 and 29.5.1, and earlier, are affected by an out-of-bounds read issue that may result in the disclosure of sensitive memory...

PT-2025-28498 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: After Effects versions 25.2, 24.6.6 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2025-28772 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8 through 2022.6 Description: The issue is a Stack-based Buffer Overflow that could lead to disclosure of sensitive memory. Exploitation requires user interaction, where a victim must open a malicious file...