Adobe Substance3D Sampler vulnerabilities

24 vulnerabilities

Known vulnerabilities in Adobe Substance3D Sampler, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5MediumCVE-2025-54205adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Read (CWE-125)Substance3D - Sampler versions 5.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.19%7.8HighCVE-2025-43581adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.27%7.8HighCVE-2025-43588adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.27%7.8HighCVE-2025-24440adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.24%7.8HighCVE-2025-24442adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%7.8HighCVE-2025-24444adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%7.8HighCVE-2025-24441adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%7.8HighCVE-2025-24445adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%7.8HighCVE-2025-24443adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.28%7.8HighCVE-2025-24439adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.29%7.8HighCVE-2024-52996adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.38%7.8HighCVE-2024-52994adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)Substance3D - Sampler versions 4.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.33%7.8HighCVE-2024-52995adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.38%5.5MediumCVE-2024-41860adobe · substance_3d_sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Vulnerability I, when parsing PSD fileSubstance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%5.5MediumCVE-2024-41861adobe · substance_3d_sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD fileSubstance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%5.5MediumCVE-2024-41863adobe · substance_3d_sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability III, when parsing DNG fileSubstance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%5.5MediumCVE-2024-41862adobe · substance_3d_sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability II, when parsing PSD fileSubstance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.23%5.5MediumCVE-2024-47459adobe · substance_3d_sampler +1 moreSubstance3D - Sampler | NULL Pointer Dereference (CWE-476)Substance3D - Sampler versions 4.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.21%7.8HighCVE-2023-48626adobe · substance_3d_sampler +1 moreAdobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability VAdobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.33%7.8HighCVE-2023-48630adobe · substance_3d_sampler +1 moreAdobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability IAdobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.EPSS0.36%