CVE-2023-25873

Adobe Substance 3D Stager is affected by an out-of-bounds read when parsing crafted SVG files, impacting version 2.0.0 and earlier. The root cause is a read past the end of an allocated memory structure, allowing code execution in the context of the current user. Exploitation requires user intera...

CVE-2023-25873 Adobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...