CVE-2025-54201
📋 TL;DR
CVE-2025-54201 is an out-of-bounds read vulnerability in Substance3D Modeler that could allow attackers to read sensitive memory contents when a user opens a malicious file. This affects all users of Substance3D Modeler versions 1.22.0 and earlier. The vulnerability requires user interaction through opening a specially crafted file.
💻 Affected Systems
- Adobe Substance3D Modeler
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
An attacker could read sensitive memory contents including passwords, encryption keys, or other application data, potentially leading to further system compromise.
Likely Case
Limited information disclosure from the application's memory space, possibly revealing some application data or system information.
If Mitigated
No impact if users only open trusted files from verified sources.
🎯 Exploit Status
Exploitation requires creating a malicious file that triggers the out-of-bounds read and convincing a user to open it.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 1.23.0 or later
Vendor Advisory: https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
Restart Required: No
Instructions:
1. Open Substance3D Modeler. 2. Go to Help > Check for Updates. 3. Follow prompts to update to version 1.23.0 or later. 4. Alternatively, download the latest version from Adobe's website.
🔧 Temporary Workarounds
Restrict file opening
allOnly open Substance3D Modeler files from trusted sources and verify file integrity before opening.
🧯 If You Can't Patch
- Implement application whitelisting to restrict which users can run Substance3D Modeler
- Use email filtering and web gateways to block suspicious file attachments
🔍 How to Verify
Check if Vulnerable:
Open Substance3D Modeler, go to Help > About, and check if version is 1.22.0 or earlier.Check Version:
Not applicable - check via application GUIVerify Fix Applied:
After updating, verify version is 1.23.0 or later in Help > About.📡 Detection & Monitoring
Log Indicators:
- Application crashes or unexpected termination when opening files
- High memory usage patterns
Network Indicators:
- Unusual file downloads from untrusted sources
SIEM Query:
EventID=1000 OR EventID=1001 AND ProcessName="Substance3D Modeler.exe" AND Version LIKE "1.22.%"