CVE-2025-54199
📋 TL;DR
Substance3D Modeler versions 1.22.0 and earlier contain an out-of-bounds read vulnerability that could allow attackers to read sensitive memory contents. This affects users who open malicious files with the vulnerable software. The vulnerability requires user interaction to exploit.
💻 Affected Systems
- Adobe Substance3D Modeler
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
An attacker could read sensitive memory contents including passwords, encryption keys, or other application data, potentially leading to further system compromise.
Likely Case
Information disclosure of application memory contents, which could include user data or system information.
If Mitigated
Limited impact with proper file handling controls and user awareness about opening untrusted files.
🎯 Exploit Status
Exploitation requires user interaction (opening malicious file) and knowledge of memory layout.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 1.23.0 or later
Vendor Advisory: https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
Restart Required: No
Instructions:
1. Open Substance3D Modeler. 2. Go to Help > Check for Updates. 3. Follow prompts to install version 1.23.0 or later. 4. Verify installation by checking version in About dialog.
🔧 Temporary Workarounds
Restrict file handling
allConfigure system to only open trusted .sbsar files and educate users about risks of opening untrusted files.
🧯 If You Can't Patch
- Implement application whitelisting to prevent execution of older vulnerable versions.
- Use network segmentation to isolate systems running vulnerable versions from sensitive data.
🔍 How to Verify
Check if Vulnerable:
Check Substance3D Modeler version in Help > About dialog. If version is 1.22.0 or earlier, system is vulnerable.Check Version:
Not applicable - check via application GUIVerify Fix Applied:
Verify version is 1.23.0 or later in Help > About dialog.📡 Detection & Monitoring
Log Indicators:
- Application crash logs with memory access violations
- Unexpected file processing from untrusted sources
Network Indicators:
- Downloads of .sbsar files from untrusted sources
SIEM Query:
EventID=1000 OR EventID=1001 AND ProcessName="Substance3D Modeler.exe" AND Description CONTAINS "access violation"