Vulnerability · Published May 13, 2025 · Assigned by adobe
CVE-2025-43553Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)
High 7.8
In plain English
A high-severity uncontrolled search path in Substance3D - Modeler from Adobe. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Official description
Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or executables, an attacker could manipulate the search path to load a malicious resource, potentially executing arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Substance3D - Modeler | 0 – through 1.21.0 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H