CVE-2023-25876

Adobe Substance 3D Stager is affected on versions 2.0.0 and earlier by an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Affected software and issue are documented across multiple sources (e.g., CVE-2023-258...

CVE-2023-25876 Adobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...