CVE-2025-54244
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Risk Assessment
Risk of arbitrary code execution on the victim's machine, potentially leading to system compromise or data theft.
Recommendation
Update Substance3D - Viewer to the latest version and avoid opening files from untrusted sources.
Other vulnerabilities in Substance3D - Viewer
See all- CVE-2025-54280High
An out-of-bounds write vulnerability in Substance3D - Viewer versions 0.25.2 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as the victim must open a malicious file.
- CVE-2025-54273High
An out-of-bounds write vulnerability in Substance3D - Viewer versions 0.25.2 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as the victim must open a malicious file.
Original NVD description (English source)
Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS