Product:
Substance3D – Viewer
Summary
Substance3D – Viewer versions 0.25.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-54274 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that, when opened by the victim using the affected version of Substance3D – Viewer, triggers the buffer overflow. This requires the victim to be tricked into opening the file, leading to arbitrary code execution with the privileges of the current user.
Affected Products
- Substance3D – Viewer versions 0.25.2 and earlier: These versions are vulnerable to a stack-based buffer overflow that can lead to arbitrary code execution.
Mitigation
Users are advised to update to the latest version of Substance3D – Viewer to mitigate the risk associated with this vulnerability. Additionally, users should avoid opening files from untrusted sources to reduce the likelihood of exploitation.