CVE-2025-54191 MEDIUM

CVE-2025-54191: Substance3D - Painter | Out-of-bounds Read (CWE-125)

Vendor Adobe
Product Substance3D - Painter
Weakness CWE-125
Published August 12, 2025
Last update August 13, 2025
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Key dates

02Disclosure timeline

August 12, 2025 CVE published
August 13, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-43760 Adobe Media Encoder MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2025-9328 Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability CVE-2025-6650 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-29280 ZDI-CAN-20372: Adobe Substance 3D Painter PLY File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-33162 Microsoft Excel Information Disclosure Vulnerability