Adobe Substance 3d Viewer — known CVE vulnerabilities

Every CVE whose affected-product data names Adobe Substance 3d Viewer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2025-54280 — CVSS 7.8 (high): Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code…
• CVE-2025-54273 — CVSS 7.8 (high): Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code…
• CVE-2025-54274 — CVSS 7.8 (high): Substance3D - Viewer versions 0.25.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary…
• CVE-2025-43582 — CVSS 7.8 (high): Substance3D - Viewer versions 0.22 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary…
• CVE-2025-49560 — CVSS 7.8 (high): Substance3D - Viewer versions 0.25 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary…
• CVE-2025-49569 — CVSS 7.8 (high): Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code…
• CVE-2025-54243 — CVSS 7.8 (high): Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code…
• CVE-2025-54244 — CVSS 7.8 (high): Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary…
• CVE-2025-54245 — CVSS 7.8 (high): Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code…
• CVE-2025-43583 — CVSS 5.5 (medium): Substance3D - Viewer versions 0.22 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application…
• CVE-2025-43584 — CVSS 5.5 (medium): Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of…
• CVE-2025-54275 — CVSS 5.5 (medium): Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could lead to application…