Heap-based Buffer Overflow in Substance3D Viewer by Adobe
CVE-2025-43582

7.8HIGH

Key Information:

Vendor

Adobe
Status
Substance3d - Viewer
Vendor
CVE Published:
8 July 2025

What is CVE-2025-43582?

The Substance3D Viewer by Adobe has a vulnerability characterized as a heap-based buffer overflow. This issue affects version 0.22 and earlier, posing a significant security risk by allowing potential arbitrary code execution within the context of the user session. For exploitation to occur, the victim must interact with malicious files, making user awareness crucial for mitigation.

Affected Version(s)

Substance3D - Viewer 0 <= 0.22

References

https://helpx.adobe.com/security/products/substance3d-vie...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-43582 : Heap-based Buffer Overflow in Substance3D Viewer by Adobe