Adobe Substance 3D Sampler vulnerabilities

CVE-2025-24440 [HIGH] CWE-787 CVE-2025-24440: Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24441 [HIGH] CWE-787 CVE-2025-24441: Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24442 [HIGH] CWE-787 CVE-2025-24442: Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24444 [HIGH] CWE-787 CVE-2025-24444: Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24445 [HIGH] CWE-787 CVE-2025-24445: Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-48630 [HIGH] CWE-787 CVE-2023-48630: Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnera Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-48626 [HIGH] CWE-787 CVE-2023-48626: Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnera Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-48625 [HIGH] CWE-787 CVE-2023-48625: Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnera Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-48627 [HIGH] CWE-787 CVE-2023-48627: Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnera Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-48628 [HIGH] CWE-787 CVE-2023-48628: Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnera Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-48629 [HIGH] CWE-787 CVE-2023-48629: Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnera Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-83965 [HIGH] CWE-121 CVE-2026-83965: Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result i Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-52996 [HIGH] CWE-122 CVE-2024-52996: Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-52995 [HIGH] CWE-122 CVE-2024-52995: Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24439 [HIGH] CWE-122 CVE-2025-24439: Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24443 [HIGH] CWE-122 CVE-2025-24443: Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-41862 [MEDIUM] CWE-125 CVE-2024-41862: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability t Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-41860 [MEDIUM] CWE-125 CVE-2024-41860: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability t Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-41863 [MEDIUM] CWE-125 CVE-2024-41863: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability t Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-41861 [MEDIUM] CWE-125 CVE-2024-41861: Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability t Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.