Out-of-Bounds Write Vulnerability in Substance3D Viewer by Adobe

CVE-2025-54275

What is CVE-2025-54275?

Versions of Substance3D Viewer up to 0.25.2 are susceptible to a vulnerability where an out-of-bounds write could enable an attacker to cause an application denial-of-service. This issue requires user interaction, meaning the victim must open a specially crafted malicious file to trigger the flaw, potentially leading to application crashes or unavailability.

References