CVE-2025-61802 Substance3D - Stager | Use After Free (CWE-416)

Substance3D - Stager versions 3.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-61802

Adobe Substance 3D Stager is affected up to version 3.1.4 (and earlier) by a Use After Free vulnerability (CVE-2025-61802) that could enable arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). The connected advisory APSB25-104...

CVE-2025-61805 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2025-61805

Substance3D Stager is affected up to version 3.1.4 due to an out-of-bounds read when parsing crafted files (CWE-125). This could allow arbitrary code execution in the user’s context, with exploitation requiring user interaction (opening a malicious file). Remediation: update to version 3.1.5 or l...

CVE-2025-61805 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2025-61807 Substance3D - Stager | Integer Overflow or Wraparound (CWE-190)

Substance3D - Stager versions 3.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-61807

Substance3D Stager ≤ 3.1.4 is affected by CVE-2025-61807 (Integer Overflow or Wraparound) that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (open a malicious file). Affected versions are fixed in 3.1.5 via APSB25-104; update to 3.1.5 or ...

CVE-2025-61807 Substance3D - Stager | Integer Overflow or Wraparound (CWE-190)

Substance3D - Stager versions 3.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-61806 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2025-61806

Substance3D Stager, versions 3.1.4 and earlier, are affected by an out-of-bounds read (CVE-2025-61806) while parsing a crafted file, potentially allowing code execution in the user’s context. Exploitation requires the user to open a malicious file. Connected advisories (APSB25-104) indicate this ...

CVE-2025-61806 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

Adobe Substance3D Stager 输入验证错误漏洞

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. An input validation error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from an integer overflow or wrap-around error that could lead to the execution of arbitra...

PT-2025-42192

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.4 and earlier Description An Integer Overflow or Wraparound issue exists in Substance3D - Stager. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User...

PT-2025-42195

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.4 and earlier Description An Integer Overflow or Wraparound issue exists in Substance3D - Stager. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User...

PT-2025-42191

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.4 and earlier Description A Use After Free issue exists in Substance3D - Stager. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User interaction is...

Adobe Substance3D Stager 资源管理错误漏洞

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. A resource management error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from reuse after release and could lead to the execution of arbitrary code in the curre...

Adobe Substance3D Stager 缓冲区错误漏洞

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from an out-of-bounds read when parsing a specially crafted file, and could lead to code execution i...

Adobe Substance3D Stager 缓冲区错误漏洞

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from an out-of-bounds read when parsing a specially crafted file, and could lead to code execution i...

Adobe Substance3D Stager 输入验证错误漏洞

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. An input validation error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from an integer overflow or wrap-around error that could lead to the execution of arbitra...

PT-2025-42193

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.4 and earlier Description The software contains an out-of-bounds read issue when processing a specially created file. This could allow a read past the end of an allocated memory structure. An attacker could...