Adobe Substance 3D Viewer NULL Pointer Dereference Vulnerability Leading to Denial-of-Service

A NULL pointer dereference vulnerability has been identified in Adobe Substance 3D Viewer versions through 0.22. This vulnerability can lead to a denial-of-service condition, causing the application to crash and disrupt service. Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability causes the application to crash, leading to a denial-of-service condition.

Remediation

Users are advised to update to Adobe Substance 3D Viewer version 0.25. For managed environments, IT administrators can deploy this update using the Adobe Admin Console.