CVE-2025-54275
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to crash the application or make it unavailable. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Risk Assessment
It may lead to application crashes and disruption, requiring a user to open a malicious file.
Recommendation
Update Substance3D - Viewer to a version later than 0.25.2 to fix the out-of-bounds write vulnerability.
Other vulnerabilities in Substance3D - Viewer
See all- CVE-2025-54280High
An out-of-bounds write vulnerability in Substance3D - Viewer versions 0.25.2 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as the victim must open a malicious file.
- CVE-2025-54273High
An out-of-bounds write vulnerability in Substance3D - Viewer versions 0.25.2 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as the victim must open a malicious file.
- CVE-2025-54244High
Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Original NVD description (English source)
Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to crash the application or make it unavailable. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS