CVE-2025-54244 Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54243 Substance3D - Viewer | Out-of-bounds Write (CWE-787)

Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54243

CVE-2025-54243 affects Adobe Substance3D Viewer up to version 0.25.1. It is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the current user’s context. Exploitation requires user interaction: the victim must open a crafted malicious file. Several sources corroborate ...

CVE-2025-54244

The CVE-2025-54244 issue affects Substance3D Viewer, specifically versions 0.25.1 and earlier. A heap-based buffer overflow in the viewer could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (the user must open a malicious file). Public s...

CVE-2025-54245 Substance3D - Viewer | Out-of-bounds Write (CWE-787)

Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

UBUNTU-CVE-2025-2581

A vulnerability has been found in xmedcon 0.25.0 and classified as problematic. Affected by this vulnerability is the function malloc of the component DICOM File Handler. The manipulation leads to integer underflow. The attack can be launched remotely. Upgrading to version 0.25.1 is able to addre...

CVE-2024-32231

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter...