{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-17T02:43:05.664","vulnerabilities":[{"cve":{"id":"CVE-2025-54190","sourceIdentifier":"psirt@adobe.com","published":"2025-08-12T21:15:37.290","lastModified":"2025-08-13T18:20:40.020","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.  Exploitation of this issue requires user interaction in that a victim must open a malicious file."},{"lang":"es","value":"Las versiones 11.0.2 y anteriores de Substance3D - Painter se ven afectadas por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confidencial. Para explotar este problema, la víctima debe abrir un archivo malicioso."}],"metrics":{"cvssMetricV31":[{"source":"psirt@adobe.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@adobe.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:substance_3d_painter:*:*:*:*:*:*:*:*","versionEndExcluding":"11.0.3","matchCriteriaId":"14734370-961E-429F-B1E2-891A7CC9B9CA"}]}]}],"references":[{"url":"https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html","source":"psirt@adobe.com","tags":["Vendor Advisory"]}]}}]}