Out-of-Bounds Write Vulnerability in Substance3D Painter by Adobe

CVE-2025-24450

What is CVE-2025-24450?

Adobe Substance3D Painter versions 10.1.2 and earlier are susceptible to an out-of-bounds write vulnerability that may allow attackers to execute arbitrary code within the context of the user. The exploitation of this issue necessitates user interaction; specifically, the user must open a malicious file crafted to trigger the vulnerability. This highlights the importance of being cautious with untrusted files while using Substance3D Painter.

References