CVE-2023-26386 ZDI-CAN-20266: Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-26385 ZDI-CAN-20267: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that ...

CVE-2023-26393 ZDI-CAN-20234: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

Adobe Substance 3D Stager USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2023-26392

CVE-2023-26392 affects Adobe Substance 3D Stager versions 2.0.1 and earlier. The root issue is a Use After Free vulnerability in USD file parsing, which could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious ...

CVE-2023-26403

Adobe Substance 3D Stager is affected by an out-of-bounds read in USD file parsing for version 2.0.1 and earlier, leading to possible information disclosure. The CVE entry notes that exploitation requires a user to open a malicious file (UI: REQUIRED) and could bypass mitigations like ASLR. Sever...

CVE-2023-26393

Adobe Substance 3D Stager (2.0.1 and earlier) is affected by an out-of-bounds read while parsing USD files, enabling arbitrary code execution in the context of the current user. The issue stems from insufficient validation during USD file parsing, and exploitation requires user interaction (victi...

CVE-2023-26391

CVE-2023-26391 concerns Adobe Substance 3D Stager, affected in versions 2.0.1 and earlier. The vulnerability is described as an out-of-bounds read that occurs while parsing a crafted file, which can read past the end of an allocated memory structure and may allow code execution in the context of ...

CVE-2023-26385

Adobe Substance 3D Stager is affected by an out-of-bounds read in USD file parsing (CVE-2023-26385) affecting 2.0.1 and earlier. The flaw can disclose memory and bypass ASLR, with exploitation requiring user interaction (victim opens a malicious file). Several sources corroborate a USD file parsi...

CVE-2023-26389: Out-of-bounds Read

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

CVE-2023-26384 ZDI-CAN-20279: Adobe Substance 3D Stager USD File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26388

CVE-2023-26388 affects Adobe Substance 3D Stager (2.0.1 and earlier). The issue is an Improper Input Validation that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (open a malicious file); another entry describes a USDZ file parsing...

CVE-2023-26391 ZDI-CAN-20256: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

PT-2023-6383 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager version 2.0.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigation...

CVE-2023-26385 ZDI-CAN-20267: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that ...

CVE-2023-26391 ZDI-CAN-20256: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

CVE-2023-26403 ZDI-CAN-20259: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that ...

CVE-2023-26387

Adobe Substance 3D Stager is affected in versions up to 2.0.1 and earlier by an Access of Uninitialized Pointer vulnerability that can disclose memory and bypass ASLR. The issue affects the parsing/handling paths in Stager and requires user interaction (victim must open a malicious file) for expl...

CVE-2023-26383

Adobe Substance 3D Stager (2.0.1 and earlier) contains a stack-based buffer overflow in the USDA file parsing path that can lead to arbitrary code execution. The issue requires user interaction (victim opening a malicious file) and is caused by insufficient length validation before copying data i...

CVE-2023-26388: Improper Input Validation

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...