CVE-2025-27172

Summary

CVE-2025-27172 is a newly disclosed vulnerability affecting Substance3D's Designer software versions 14.1 and older. This issue involves an out-of-bounds write vulnerability that could potentially enable arbitrary code execution. Notably, exploitation of this flaw requires user interaction, meaning a victim must open a maliciously crafted file to be vulnerable. Successful exploitation could lead to significant security risks, including unauthorized system access or data theft. Users are urged to update to the latest software version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.