CVE-2025-21170: Substance3D - Modeler | NULL Pointer Dereference (CWE-476)
Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21170?
CVE-2025-21170 has a moderate severity level due to its potential to cause application denial-of-service.
How do I fix CVE-2025-21170?
To fix CVE-2025-21170, upgrade to Substance3D Modeler version 1.15.1 or later.
What vulnerability type is CVE-2025-21170?
CVE-2025-21170 is a NULL Pointer Dereference vulnerability.
What are the consequences of exploiting CVE-2025-21170?
Exploitation of CVE-2025-21170 can lead to an application crash resulting in a denial-of-service condition.
Which versions of Substance3D Modeler are affected by CVE-2025-21170?
Substance3D Modeler versions up to and including 1.15.0 are affected by CVE-2025-21170.