CVE-2023-25877

Adobe Substance 3D Stager is affected in versions 2.0.0 and earlier by an out-of-bounds read in OBJ file parsing that can disclose memory contents and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Multiple sources confirm this information and note an officia...

CVE-2023-25867

Adobe Substance 3D Stager is affected in versions 2.0.0 and earlier. The issue is described across sources as memory corruption/memory buffer overflow during PCX file parsing, arising from improper input handling and leading to arbitrary code execution in the context of the current user when a us...

CVE-2023-25871

Adobe Substance 3D Stager is affected by CVE-2023-25871: a Use-After-Free vulnerability in SVG file parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions are 2.0.0 and earlier...

CVE-2023-25866 Adobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-25875

CVE-2023-25875 affects Adobe Substance 3D Stager, specifically versions 2.0.0 and earlier. The issue is an out-of-bounds read in OBJ file parsing that can disclose memory contents and potentially bypass mitigations like ASLR. Exploitation requires user interaction (victim opens a malicious file)....

CVE-2023-25878

CVE-2023-25878 affects Adobe Substance 3D Stager, specifically versions 2.0.0 and earlier. The issue is an out-of-bounds read in the OBJ file parsing that can disclose memory contents, with the attacker able to bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). D...

CVE-2023-25868

CVE-2023-25868 affects Adobe Substance 3D Stager up to version 2.0.0. The issue is a heap-based buffer overflow in SVG file parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file); remote code...

CVE-2023-25866

Adobe Substance 3D Stager is affected by an out-of-bounds write in OBJ file parsing, impacting version 2.0.0 and earlier. The issue could allow arbitrary code execution in the context of the current user and requires user interaction (victim must open a malicious file). The root cause is an unsaf...

CVE-2023-25870

CVE-2023-25870 affects Adobe Substance 3D Stager versions 2.0.0 and earlier. The issue is an out-of-bounds write in the SVG file parsing that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file). ...

CVE-2023-25872

CVE-2023-25872 affects Adobe Substance 3D Stager versions 2.0.0 and earlier. The issue is a Heap-based Buffer Overflow in SVG file parsing that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file), with...

CVE-2023-25865

Adobe Substance 3D Stager is affected by an Improper Input Validation flaw in OBJ file parsing that can lead to arbitrary code execution in the context of the current user. Root cause: insufficient validation during OBJ parsing, causing memory corruption/RCE. Affected versions: 2.0.0 and earlier....

CVE-2023-25864

CVE-2023-25864 affects Adobe Substance 3D Stager, specifically the FBX file parsing component. The issue is described as a heap-based buffer overflow that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a maliciou...

CVE-2023-25871 Adobe Substance 3D Stager SVG File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

The vulnerability of the Substance 3D Stager software arises from an operation that goes beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer in memory, allowing an attacker to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory when processing USDC files. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malware file or a specially created...

The vulnerability of the Substance 3D Stager software lies in its inability to handle buffer overflow attacks, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer in memory, allowing an attacker to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...