CVE-2025-27172: 
Adobe Substance 3D Designer vulnerability analysis and mitigation

Adobe Substance3D Designer versions 14.1 and earlier contain an out-of-bounds write vulnerability that was disclosed on March 11, 2025. The vulnerability affects the Adobe Substance 3D Designer software suite, which is a professional 3D design tool (NVD CVE, Adobe Security).

The vulnerability is classified as an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. The vulnerability has received a CVSS v3.1 base score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, and user interaction required (NVD CVE).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user, potentially allowing an attacker to execute malicious code with the same privileges as the affected application (NVD CVE).

Adobe has released version 14.1.1 of Substance 3D Designer to address this vulnerability. Users are advised to update to this latest version to mitigate the risk (ASEC Advisory).