Out-of-Bounds Read Vulnerability in Adobe Substance3D Designer Software
CVE-2025-21167
What is CVE-2025-21167?
Adobe Substance3D Designer, specifically versions up to and including 14.1, is affected by a vulnerability that involves out-of-bounds read scenarios. This flaw could allow attackers to disclose sensitive memory data. Exploiting this vulnerability necessitates that a victim interact with a malicious file, which could enable the attacker to effectively bypass various security mitigations such as Address Space Layout Randomization (ASLR). Users of the affected versions should exercise caution and ensure they do not open untrusted files.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Substance3D - Designer 0 <= 14.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved