CVE-2025-21138

Summary

CVE-2025-21138 is a serious out-of-bounds write vulnerability affecting Substance3D's Designer software versions 14.0 and earlier. This issue could allow an attacker to execute arbitrary code in the context of the current user, providing a potential security risk. Users are required to open a maliciously crafted file to exploit this vulnerability, making it important for individuals to exercise caution when handling untrusted files. This flaw poses a significant threat, underscoring the importance of keeping software updated with the latest security patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.