Vulnerability details

CVE-2025-24445

Adobe Substance 3D Sampler

Substance3D - Sampler | Out-of-bounds Write (CWE-787)

CVSS 3.1

7.8High

Official description

Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS scores

Score	Version	Source	Vector
7.8High	3.1	CVEProject cvelistV5 (CNA) (adobe)	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
Adobe	Substance 3D Sampler	v ≤ 4.5.2	CVEProject cvelistV5 (CNA)

References and advisories

https://helpx.adobe.com/security/products/substance3d-sampler/apsb25-16.html vendor-advisory

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-03-11
Last updated: 2025-03-11
State: Published
Assigner (CNA): adobe

Exploit prediction (EPSS)

0.22%

Probability of exploitation in 30 days

13.6%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-787
Out-of-bounds Write (CWE-787)