CVE-2025-54259

Substance3D - Modeler versions 1.22.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Sco...

CVE-2025-54258

Substance3D - Modeler versions 1.22.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is unchanged...

CVE-2025-54260

Substance3D - Modeler versions 1.22.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curren...

CVE-2025-54258

CVE-2025-54258 affects Adobe Substance3D Modeler up to version 1.22.2. The issue is a Use After Free in a component handling crafted files, leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affected product/v...

CVE-2025-54258 Substance3D - Modeler | Use After Free (CWE-416)

Substance3D - Modeler versions 1.22.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is unchanged...

CVE-2025-54258 Substance3D - Modeler | Use After Free (CWE-416)

Substance3D - Modeler versions 1.22.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is unchanged...

CVE-2025-54259

Product: Adobe Substance 3D Modeler. Affected: versions 1.22.2 and earlier. Vulnerability: Integer Overflow or Wraparound (CVE-2025-54259) in parsing/opening crafted files, enabling arbitrary code execution in the user’s context. Exploit requires user interaction (open malicious file). Impact: hi...

CVE-2025-54259 Substance3D - Modeler | Integer Overflow or Wraparound (CWE-190)

Substance3D - Modeler versions 1.22.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Sco...

CVE-2025-54259 Substance3D - Modeler | Integer Overflow or Wraparound (CWE-190)

Substance3D - Modeler versions 1.22.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Sco...

CVE-2025-54260

CVE-2025-54260 affects Adobe Substance3D Modeler up to version 1.22.2. The vulnerability is an out-of-bounds read that can occur while parsing a crafted file, potentially allowing code execution in the user’s context. Exploitation requires user interaction (victim opens a malicious file). The iss...

CVE-2025-54260 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curren...

CVE-2025-54260 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curren...

CVE-2025-54245

Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54243

Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54244

Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54244

Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54243

Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54245

Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54243

CVE-2025-54243 affects Adobe Substance3D Viewer up to version 0.25.1. It is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the current user’s context. Exploitation requires user interaction: the victim must open a crafted malicious file. Several sources corroborate ...

CVE-2025-54244

The CVE-2025-54244 issue affects Substance3D Viewer, specifically versions 0.25.1 and earlier. A heap-based buffer overflow in the viewer could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (the user must open a malicious file). Public s...