CVE-2023-25865 Adobe Substance 3D Stager OBJ File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-25864

CVE-2023-25864 affects Adobe Substance 3D Stager, specifically the FBX file parsing component. The issue is described as a heap-based buffer overflow that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a maliciou...

CVE-2023-25864 Adobe Substance 3D Stager FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-25864: Heap-based Buffer Overflow

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-25873: Out-of-bounds Read

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

CVE-2023-25874

Adobe Substance 3D Stager SVG parsing has a Heap-based Buffer Overflow affecting version 2.0.0 and earlier, enabling arbitrary code execution in the context of the current user when a malicious SVG is opened. The issue requires user interaction (opening a crafted file). Documented impact: remote ...

CVE-2023-25876

Adobe Substance 3D Stager is affected on versions 2.0.0 and earlier by an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Affected software and issue are documented across multiple sources (e.g., CVE-2023-258...

Substance 3D Stager Use-After-Free

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Substance 3D Stager Heap Buffer Overflow

The vulnerability of the Substance 3D Stager software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...

Substance 3D Stager Buffer Overflow Info Disclosure

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

Substance 3D Stager Buffer Overflow

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Substance 3D Stager Buffer Overflow Info Disclosure

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

Adobe Substance 3D Stager Improper Input Validation Vulnerability (CNVD-2023-43898)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from an improper input validation vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Dimension Memory Misreference Vulnerability (CNVD-2023-27688)

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. Adobe Dimension is vulnerable to a memory mis-reference vulnerability that could be exploited by attackers to execute arbitrary code on the system...

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2023-41874)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a memory leak...

Adobe Dimension Out-of-Bounds Read Vulnerability (CNVD-2023-41412)

Adobe Dimension is a set of 2D and 3D composite design tools from the American company Audobee Adobe. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

Adobe Dimension Out-of-Bounds Read Vulnerability (CNVD-2023-41426)

Adobe Dimension is a set of 2D and 3D composite design tools from the American company Audobee Adobe. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Adobe Dimension Out-of-Bounds Read Vulnerability (CNVD-2023-41414)

Adobe Dimension is a set of 2D and 3D composite design tools from the American company Audobee Adobe. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current user...

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2023-43899)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current user...