Substance 3d Modeler Adobe Substance 3d Modeler

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Adobe Substance 3d Modeler.

By the Year

In 2025 there have been 6 vulnerabilities in Adobe Substance 3d Modeler with an average score of 7.0 out of ten. Last year, in 2024 Substance 3d Modeler had 9 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Substance 3d Modeler in 2025 could surpass last years number. However, the average CVE base score of the vulnerabilities in 2025 is greater by 0.26.

Year Vulnerabilities Average Score
2025 6 7.03
2024 9 6.78
2023 0 0.00
2022 0 0.00
2021 0 0.00
2020 0 0.00
2019 0 0.00
2018 0 0.00

It may take a day or so for new Substance 3d Modeler vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Adobe Substance 3d Modeler Security Vulnerabilities

Substance3D - Modeler versions 1.21.0 and earlier are affected by an out-of-bounds write vulnerability

CVE-2025-43554 7.8 - High - May 13, 2025

Substance3D - Modeler versions 1.21.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability

CVE-2025-43553 7.8 - High - May 13, 2025

Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or executables, an attacker could manipulate the search path to load a malicious resource, potentially executing arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

DLL preloading

Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability

CVE-2025-21170 5.5 - Medium - March 11, 2025

Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

NULL Pointer Dereference

Substance3D - Modeler versions 1.15.0 and earlier are affected by a Use After Free vulnerability

CVE-2025-27181 7.8 - High - March 11, 2025

Substance3D - Modeler versions 1.15.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

Substance3D - Modeler versions 1.15.0 and earlier are affected by an out-of-bounds read vulnerability

CVE-2025-27180 5.5 - Medium - March 11, 2025

Substance3D - Modeler versions 1.15.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Substance3D - Modeler versions 1.15.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability

CVE-2025-27173 7.8 - High - March 11, 2025

Substance3D - Modeler versions 1.15.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Heap-based Buffer Overflow

Substance3D Modeler Out-of-Bounds Read Vulnerability

CVE-2024-53005 5.5 - Medium - December 10, 2024

Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Substance3D Modeler Out-of-Bounds Read Vulnerability

CVE-2024-53004 5.5 - Medium - December 10, 2024

Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Substance3D Modeler Out-of-Bounds Write Arbitrary Code Execution Vulnerability

CVE-2024-53003 7.8 - High - December 10, 2024

Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Substance3D Modeler Out-of-Bounds Write Arbitrary Code Execution Vulnerability

CVE-2024-53002 7.8 - High - December 10, 2024

Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Substance3D Modeler Out-of-Bounds Write Arbitrary Code Execution Vulnerability

CVE-2024-53001 7.8 - High - December 10, 2024

Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Substance3D Modeler Out-of-Bounds Write Arbitrary Code Execution Vulnerability

CVE-2024-53000 7.8 - High - December 10, 2024

Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Substance3D Modeler Heap-based Buffer Overflow Vulnerability

CVE-2024-52999 7.8 - High - December 10, 2024

Substance3D - Modeler versions 1.14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Substance3D Modeler NULL Pointer Dereference Denial-of-Service Vulnerability

CVE-2024-53006 5.5 - Medium - December 10, 2024

Substance3D - Modeler versions 1.14.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

NULL Pointer Dereference

Substance3D Modeler NULL Pointer Dereference Denial-of-Service Vulnerability

CVE-2024-52833 5.5 - Medium - December 10, 2024

Substance3D - Modeler versions 1.14.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

NULL Pointer Dereference

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Adobe Substance 3d Modeler or by Adobe? Click the Watch button to subscribe.

Adobe
Vendor

subscribe