CVE-2025-21170

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.15.0 and earlier

Description: The issue is a NULL Pointer Dereference that could result in an application denial-of-service. An attacker could exploit this to crash the application, leading to a denial-of-service condition. Exploitation requires user interaction, where a victim must open a malicious file.

Recommendations: For Substance3D - Modeler versions 1.15.0 and earlier, update to a version later than 1.15.0 to resolve the issue. As a temporary workaround, consider avoiding the opening of files from untrusted sources to minimize the risk of exploitation.