CVE-2025-21137

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions 14.0 and earlier

Description The issue is related to a heap-based buffer overflow in the dynamic memory of Substance 3D Designer, which could allow an attacker to execute arbitrary code in the context of the current user by using a specially crafted malicious file. Exploitation of this issue requires user interaction, as the victim must open the malicious file.

Recommendations For Substance3D - Designer versions 14.0 and earlier, update to a version later than 14.0 to resolve the issue. As a temporary workaround, consider avoiding the use of files from untrusted sources to minimize the risk of exploitation. Restrict access to potentially vulnerable features or modules in Substance3D - Designer until a patch is available.