Adobe Substance3D Painter up to 11.0.1 out-of-bounds write

Summaryinfo

A vulnerability, which was classified as critical, has been found in Adobe Substance3D Painter up to 11.0.1. Impacted is an unknown function. The manipulation leads to out-of-bounds write. This vulnerability is documented as CVE-2025-47108. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Adobe Substance3D Painter up to 11.0.1. It has been rated as critical. This issue affects an unknown functionality. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. Using CWE to declare the problem leads to CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Substance3D - Painter versions 11.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The advisory is shared at helpx.adobe.com. The identification of this vulnerability is CVE-2025-47108 since 04/30/2025. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 06/12/2025).

The vulnerability scanner Nessus provides a plugin with the ID 238334 (Adobe Substance 3D Painter < 11.0.2 (APSB25-58)), which helps to determine the existence of the flaw in a target environment.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (238334) and EUVD (EUVD-2025-17694). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Adobe

Name

• Substance3D Painter

Version

• 11.0.0
• 11.0.1

License

• commercial

Website

• Vendor: https://www.adobe.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion