CVE-2025-24440: 
Adobe Substance 3D Sampler vulnerability analysis and mitigation

A vulnerability identified as CVE-2025-24440 affects Adobe's Substance3D - Sampler versions 4.5.2 and earlier. The vulnerability was disclosed on March 11, 2025, and was reported by Adobe Systems Incorporated (NVD).

The vulnerability is classified as an out-of-bounds write vulnerability (CWE-787). It has received a CVSS v3.1 base score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This indicates local access vector, low attack complexity, no privileges required, and user interaction required, with high impacts on confidentiality, integrity, and availability (NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The exploitation requires user interaction, specifically opening a malicious file (NVD).

The vulnerability requires user interaction for successful exploitation, as a victim must open a malicious file. The attack complexity is considered low, but local access is required (NVD).

Users of affected versions (4.5.2 and earlier) of Substance3D - Sampler should update to the latest version as recommended by Adobe (Adobe Security).