Adobe Substance3D Sampler vulnerabilities

CVE-2024-41863 [MEDIUM] CWE-125 CVE-2024-41863: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability t Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-41861 [MEDIUM] CWE-125 CVE-2024-41861: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability t Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54205 [MEDIUM] CWE-125 CVE-2025-54205: Substance3D - Sampler versions 5.0.3 and earlier are affected by an out-of-bounds read vulnerability Substance3D - Sampler versions 5.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47459 [MEDIUM] CWE-476 CVE-2024-47459: Substance3D - Sampler versions 4.5 and earlier are affected by a NULL Pointer Dereference vulnerabil Substance3D - Sampler versions 4.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue requires user interaction in that a victim must open a malic