CVE-2025-27165

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

ubstance3D - Stager versions 3.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

References

Link	Resource
https://helpx.adobe.com/security/products/substance3d_stager/apsb25-64.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

14 Jul 2025, 18:03

Type	Values Removed	Values Added
First Time		Microsoft windows Microsoft Adobe Apple Adobe substance 3d Stager Apple macos
References	~~() https://helpx.adobe.com/security/products/substance3d_stager/apsb25-64.html -~~	() https://helpx.adobe.com/security/products/substance3d_stager/apsb25-64.html - Vendor Advisory
CPE		cpe:2.3:a:adobe:substance_3d_stager:::::::: cpe:2.3:o:apple:macos:-:::::::* cpe:2.3:o:microsoft:windows:-:::::::*

10 Jul 2025, 13:18

Type	Values Removed	Values Added
Summary		(es) Las versiones 3.1.2 y anteriores de Substance3D - Stager se ven afectadas por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confidencial. Para explotar este problema, la víctima debe abrir un archivo malicioso.