CVE-2025-21169
published 2025-03-11CVE-2025-21169: Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | substance3d_designer | <= 14.1 | — |
| adobe | substance_3d_designer | < 14.1.1 | 14.1.1 |