CVE Catalog

CVE-2025-54258

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.22%

11th percentile - higher than 11% of all known CVEs

Summary

Substance3D - Modeler versions 1.22.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.

Risk Assessment

Arbitrary code execution could allow an attacker to take control of the application and the user's system, potentially leading to data theft or further compromise.

Recommendation

Update Substance3D - Modeler to the latest version that includes the fix, and avoid opening untrusted files.

Other vulnerabilities in Substance3D - Modeler

See all
Original NVD description (English source)

Substance3D - Modeler versions 1.22.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is unchanged.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS