Heap-based Buffer Overflow in Substance3D - Sampler by Adobe

CVE-2025-24443

What is CVE-2025-24443?

The Substance3D - Sampler by Adobe is susceptible to a Heap-based Buffer Overflow vulnerability, which may allow an attacker to execute arbitrary code via user-triggered actions. To exploit this flaw, a victim must specifically open a malicious file, leading to potential unauthorized commands being run in the context of the current user. It is crucial for users to avoid opening unknown or suspicious files to mitigate this risk.

References