CVE-2025-21139
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 122
Summary
CVE-2025-21139 is a Heap-based Buffer Overflow vulnerability affecting Substance3D Designer versions 14.0 and earlier. This issue allows attackers to execute arbitrary code in the context of the current user. Exploitation of this vulnerability necessitates user interaction, as a victim must open a maliciously crafted file to be affected. Successful exploitation could lead to significant security risks, including data theft or system compromise. Users are urged to update their software to the latest version to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Substance 3D