CVE-2025-43584

Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Configurations

Configuration 1 (hide)

cpe:2.3:a:adobe:substance_3d_viewer:*:*:*:*:*:*:*:*

History

11 Jul 2025, 17:46

Type Values Removed Values Added
CPE cpe:2.3:a:adobe:substance_3d_viewer:*:*:*:*:*:*:*:*
References () https://helpx.adobe.com/security/products/substance3d-viewer/apsb25-54.html - () https://helpx.adobe.com/security/products/substance3d-viewer/apsb25-54.html - Vendor Advisory
First Time Adobe
Adobe substance 3d Viewer

08 Jul 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-08 21:15

Updated : 2025-07-11 17:46


NVD link : CVE-2025-43584

Mitre link : CVE-2025-43584


JSON object : View

Products Affected

adobe

  • substance_3d_viewer
CWE
CWE-125

Out-of-bounds Read