Out-of-Bounds Write Vulnerability in Substance3D Painter by Adobe

CVE-2025-30322

What is CVE-2025-30322?

Substance3D Painter versions 11.0 and earlier contain an out-of-bounds write vulnerability that may allow an attacker to execute arbitrary code with the privileges of the current user. This flaw necessitates user interaction; specifically, the victim must open a specially crafted file designed to exploit this vulnerability. It underscores the importance of caution when handling unexpected or suspicious files.

References