CVE-2025-49569

Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49569

Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49569 Substance3D - Viewer | Out-of-bounds Write (CWE-787)

Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49569

Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49569

Substance3D Viewer (Adobe)

CVE-2025-49569 Substance3D - Viewer | Out-of-bounds Write (CWE-787)

Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49560 Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Viewer versions 0.25 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49560 Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Viewer versions 0.25 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49560

Substance3D Viewer (Adobe)32: A heap-based buffer overflow affects Substance3D Viewer versions 0.25 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Several sources confirm the vulnerability ...

CVE-2025-49560

Substance3D - Viewer versions 0.25 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Substance3D Viewer 安全漏洞

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the context of the curre...

PT-2025-32888 · Adobe · Substance3D - Viewer

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25 and earlier Description: Substance3D - Viewer versions 0.25 and earlier are affected by a Heap-based Buffer Overflow vulnerability. Successful exploitation of this issue could lead to arbitrary code executio...

PT-2025-32889 · Adobe · Substance3D - Viewer

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25 and earlier Description: Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write issue that could lead to arbitrary code execution within the current user's context. Exploitatio...

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a standalone desktop application for viewing and editing 3D files from Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Viewer version 0.25 and prior versions, which originates from an out-of-bounds write and could lead to the execution of arbitrary...

APSB25-72 : Security update available for Adobe Substance 3D Viewer

Adobe has released an update for Adobe Substance 3D Viewer. This update addresses critical vulnerabilities in Adobe Substance 3D Viewer. Successful exploitation could lead to arbitrary code execution...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization over the /auth/listprojects endpoint. A user can perform unauthorized actions beyond their intended permissions by changing the role argument from Viewer to Owner. Remediation There is no fixed version for...

Malicious code in hcs-image-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 28a35db26dad04831df161435cbbf5343e242f3ebc2fe7764b3feadd1926646c The OpenSSF Package Analysis project identified 'hcs-image-viewer' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6813 Malicious code in hcs-image-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 28a35db26dad04831df161435cbbf5343e242f3ebc2fe7764b3feadd1926646c The OpenSSF Package Analysis project identified 'hcs-image-viewer' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2025-54784

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. There is a Cross Site Scripting XSS vulnerability in the email viewer in versions 7.14.0 through 7.14.6. An external attacker could send a prepared message to the inbox of the SuiteCRM-instance...

CVE-2025-51629

A cross-site scripting XSS vulnerability in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Temp parameter...