CVE-2023-25863

Adobe Substance 3D Stager is affected by an out-of-bounds read while parsing crafted files, impacting version 2.0.0 and earlier. The underlying issue occurs during USDC/file parsing and could allow code execution in the context of the current user. Exploitation requires user interaction (victim o...

CVE-2023-25863 Adobe Substance 3D Stager USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...