CVE-2025-21161

Name of the Vulnerable Software and Affected Versions: Substance3D - Designer versions 14.0.2 and earlier

Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, as a victim must open a malicious file.

Recommendations: For versions 14.0.2 and earlier, update to a version later than 14.0.2 to resolve the issue. As a temporary workaround, consider avoiding the use of potentially malicious files until a patch is available. Restrict access to untrusted files to minimize the risk of exploitation.