CVE-2025-21170

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21170
Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-21.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:adobe:substance_3d_modeler:*:*:*:*:*:*:*:*
History

14 Apr 2025, 15:10

Type Values Removed Values Added
CPE cpe:2.3:a:adobe:substance_3d_modeler:*:*:*:*:*:*:*:*
First Time Adobe substance 3d Modeler
Adobe
Summary
  • (es) Las versiones 1.15.0 y anteriores de Substance3D - Modeler se ven afectadas por una vulnerabilidad de desreferencia de puntero nulo que podría provocar una denegación de servicio (DSP) en la aplicación. Un atacante podría explotar esta vulnerabilidad para bloquear la aplicación y provocar una DSP. Para explotar este problema, es necesario que la víctima abra un archivo malicioso.
References () https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-21.html - () https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-21.html - Vendor Advisory

11 Mar 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-11 21:15

Updated : 2025-04-14 15:10

NVD link : CVE-2025-21170

Mitre link : CVE-2025-21170

CVE.ORG link : CVE-2025-21170

JSON object : View

Products Affected

adobe

  • substance_3d_modeler
CWE
CWE-476

NULL Pointer Dereference