CVE-2025-24443
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 11, 2025
Updated: Apr 1, 2025
CWE ID 122
CWE ID 787
Summary
CVE-2025-24443 is a Heap-based Buffer Overflow vulnerability affecting Substance3D's Sampler, versions 4.5.2 and earlier. This issue could allow an attacker to execute arbitrary code within the context of the current user. Exploitation necessitates user interaction, as the victim must open a specially crafted file to trigger the vulnerability. This security flaw poses a significant risk if left unaddressed.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Adobe