CVE-2025-54200
📋 TL;DR
Substance3D Modeler versions 1.22.0 and earlier contain an out-of-bounds read vulnerability that could allow attackers to read sensitive memory contents. This affects users who open malicious files with the vulnerable software. The vulnerability requires user interaction to exploit.
💻 Affected Systems
- Adobe Substance 3D Modeler
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Disclosure of sensitive memory contents including passwords, encryption keys, or other application data stored in memory
Likely Case
Limited information disclosure from application memory, potentially exposing some user data or system information
If Mitigated
No impact if users only open trusted files from verified sources
🎯 Exploit Status
Requires user to open a specially crafted malicious file; no known public exploits
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 1.23.0 or later
Vendor Advisory: https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
Restart Required: No
Instructions:
1. Open Substance 3D Modeler 2. Go to Help > Check for Updates 3. Install update to version 1.23.0 or later 4. Restart application if prompted
🔧 Temporary Workarounds
Restrict file sources
allOnly open Substance 3D Modeler files from trusted sources and verified creators
Use application sandboxing
allRun Substance 3D Modeler in a sandboxed environment to limit potential memory access
🧯 If You Can't Patch
- Implement strict file handling policies to only open files from trusted sources
- Use endpoint protection software to scan and block potentially malicious 3D model files
🔍 How to Verify
Check if Vulnerable:
Check Substance 3D Modeler version in Help > About Substance 3D ModelerCheck Version:
Not applicable - check via application GUIVerify Fix Applied:
Verify version is 1.23.0 or later in Help > About Substance 3D Modeler📡 Detection & Monitoring
Log Indicators:
- Application crashes when opening files
- Unusual memory access patterns in application logs
Network Indicators:
- Downloads of 3D model files from untrusted sources
SIEM Query:
EventID=1000 OR EventID=1001 AND ProcessName="Substance3DModeler.exe" AND Description contains "access violation"