Substance3D - Viewer versions 0.22 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
History

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00018}

epss

{'score': 0.00019}


Fri, 11 Jul 2025 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe substance 3d Viewer
CPEs cpe:2.3:a:adobe:substance_3d_viewer:*:*:*:*:*:*:*:*
Vendors & Products Adobe
Adobe substance 3d Viewer

Wed, 09 Jul 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 08 Jul 2025 21:15:00 +0000

Type Values Removed Values Added
Description Substance3D - Viewer versions 0.22 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Substance3D - Viewer | NULL Pointer Dereference (CWE-476)
Weaknesses CWE-476
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published: 2025-07-08T21:07:23.457Z

Updated: 2025-07-09T16:05:09.085Z

Reserved: 2025-04-16T16:23:13.182Z

Link: CVE-2025-43583

cve-icon Vulnrichment

Updated: 2025-07-09T13:48:59.276Z

cve-icon NVD

Status : Analyzed

Published: 2025-07-08T21:15:25.543

Modified: 2025-07-11T17:46:43.720

Link: CVE-2025-43583

cve-icon Redhat

No data.