CVE-2025-54190
📋 TL;DR
Substance3D Painter versions 11.0.2 and earlier contain an out-of-bounds read vulnerability that could allow attackers to read sensitive memory contents. This affects users who open malicious project files in the software. The vulnerability requires user interaction through opening a malicious file.
💻 Affected Systems
- Adobe Substance3D Painter
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
An attacker could read sensitive memory contents including passwords, encryption keys, or other application data, potentially leading to further system compromise.
Likely Case
Information disclosure of application memory contents, which could include user data or system information that might aid in further attacks.
If Mitigated
Limited impact with proper user education about opening untrusted files and network segmentation.
🎯 Exploit Status
Requires user to open a specially crafted malicious file. No authentication bypass needed but requires social engineering.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 11.0.3 or later
Vendor Advisory: https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html
Restart Required: No
Instructions:
1. Open Substance3D Painter. 2. Go to Help > Check for Updates. 3. Follow prompts to update to version 11.0.3 or later. 4. Alternatively, download latest version from Adobe Creative Cloud.
🔧 Temporary Workarounds
Restrict file opening
allOnly open project files from trusted sources and educate users about the risks of opening untrusted files.
🧯 If You Can't Patch
- Implement application whitelisting to prevent execution of older vulnerable versions
- Use network segmentation to isolate Substance3D Painter systems from sensitive data
🔍 How to Verify
Check if Vulnerable:
Open Substance3D Painter, go to Help > About Substance3D Painter, check if version is 11.0.2 or earlier.Check Version:
On Windows: Check program version in Control Panel > Programs and Features. On macOS: Check About Substance3D Painter in application menu.Verify Fix Applied:
Verify version is 11.0.3 or later in Help > About Substance3D Painter.📡 Detection & Monitoring
Log Indicators:
- Application crash logs from Substance3D Painter
- Unexpected memory access errors in system logs
Network Indicators:
- No direct network indicators as exploit requires local file access
SIEM Query:
EventID=1000 OR EventID=1001 AND SourceName='Substance3D Painter' OR ProcessName='Substance3D Painter.exe'