Out-of-Bounds Read Vulnerability in Substance3D Viewer by Adobe
CVE-2025-43584

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Substance3d - Viewer
Vendor
CVE Published:
8 July 2025

What is CVE-2025-43584?

Substance3D Viewer prior to version 0.23 contains an out-of-bounds read vulnerability that may allow an attacker to disclose sensitive information from memory. Exploitation of this vulnerability hinges on user interaction; users must open a specially crafted malicious file for the attack to be successful. It's crucial for users to remain vigilant and avoid opening untrusted files to mitigate potential data exposure risks.

Affected Version(s)

Substance3D - Viewer 0 <= 0.22

References

https://helpx.adobe.com/security/products/substance3d-vie...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-43584 : Out-of-Bounds Read Vulnerability in Substance3D Viewer by Adobe