Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:substance_3d_viewer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductSubstance 3D Viewer (810cf7d2-c7c2-55b2-b9f2-f2e4c32cbb08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-54280 vulnerable 2026-06-08 07:33:12.291907 Substance3D - Viewer | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2025-10-14T19:07:35.869Z
Updated: 2026-02-26T16:58:01.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54275 vulnerable 2026-06-08 07:33:12.290275 Substance3D - Viewer | Out-of-bounds Write (CWE-787)
MEDIUM (5.5)
Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to crash the application or make it unavailable. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2025-10-14T19:07:37.152Z
Updated: 2025-10-14T20:13:20.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54274 vulnerable 2026-06-08 07:33:12.289961 Substance3D - Viewer | Stack-based Buffer Overflow (CWE-121)
HIGH (7.8)
Substance3D - Viewer versions 0.25.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2025-10-14T19:07:38.712Z
Updated: 2026-02-26T16:57:59.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54273 vulnerable 2026-06-08 07:33:12.289682 Substance3D - Viewer | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2025-10-14T19:07:37.933Z
Updated: 2026-02-26T16:58:00.825Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54245 vulnerable 2026-06-08 07:33:12.020258 Substance3D - Viewer | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2025-09-09T21:10:25.377Z
Updated: 2026-02-26T17:48:47.774Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54244 vulnerable 2026-06-08 07:33:12.019959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54243 vulnerable 2026-06-08 07:33:12.019463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49569 vulnerable 2026-06-08 07:29:13.875904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49560 vulnerable 2026-06-08 07:29:13.871682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43584 vulnerable 2026-06-08 07:25:09.147123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43583 vulnerable 2026-06-08 07:25:09.146711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43582 vulnerable 2026-06-08 07:25:09.146209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.