Out-of-Bounds Write Vulnerability in Substance3D - Viewer by Adobe

CVE-2025-54280

What is CVE-2025-54280?

The Substance3D - Viewer by Adobe is susceptible to an out-of-bounds write vulnerability, which can lead to arbitrary code execution under the context of the current user. This flaw specifically affects versions 0.25.2 and earlier. Successful exploitation necessitates user interaction, such as opening a maliciously crafted file, which could allow attackers to execute unauthorized commands on the victim's system.

References