CVE-2025-49569
published 2025-08-12CVE-2025-49569: Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | substance3d_viewer | <= 0.25 | — |
| adobe | substance_3d_viewer | < 0.25.1 | 0.25.1 |
| msrc | azl3_packer_1.9.4-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_packer_1.9.5-1_on_azure_linux_3.0 | — | — |
| msrc | cbl2_cri-o_1.22.3-12_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_packer_1.8.7-2_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_packer_1.9.5-3_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.5HIGH