Adobe Substance 3d Viewer vulnerabilities

12 CVEs affecting Adobe Substance 3d Viewer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-54280, published 2025-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-43584, published 2025-07-08. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user…
CVE-2025-43582, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.22 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user, scope…
CVE-2025-54244, published 2025-09-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.…
CVE-2025-43583, published 2025-07-08. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.22 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability…
CVE-2025-54274, published 2025-10-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.25.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.…
CVE-2025-49560, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.25 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.…
CVE-2025-54245, published 2025-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2025-54243, published 2025-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2025-54280, published 2025-10-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2025-54273, published 2025-10-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…

Latest

CVE-2025-54275, published 2025-10-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability…
CVE-2025-49569, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…