Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2024-4454358)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager, which can be exploited by attackers to cause a sensitive memory leak...

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2024-27553)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Stager version 2.1.1 and prior versions, which can be exploited by an attacker to cause a sensitive memory disclosure...

CVE-2023-47080

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

CVE-2023-47081

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

CVE-2023-47081

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

Design/Logic Flaw

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

Design/Logic Flaw

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

CVE-2023-47080 Adobe Substance 3D Stager v2.1.1 Vulnerability VI

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

CVE-2023-47080

Summary: Adobe Substance 3D Stager (Windows/macOS) — versions 2.1.1 and earlier — suffer an out-of-bounds read that can disclose memory and bypass mitigations such as ASLR. Attack requires user interaction, as a victim must open a malicious file. Connected documents corroborate the affected versi...

CVE-2023-47081 Adobe Substance 3D Stager v2.1.1 Vulnerability II

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

CVE-2023-47081 Adobe Substance 3D Stager v2.1.1 Vulnerability II

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

CVE-2023-47081

Adobe Substance 3D Stager is affected in versions 2.1.1 and earlier by an out-of-bounds read that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); the attack is local with low complexity. The affected component is the Stager ap...

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager, which can be exploited by attackers to cause a sensitive memory leak...

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Stager version 2.1.1 and prior versions, which can be exploited by an attacker to cause a sensitive memory disclosure...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply th...

PT-2023-8591 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.1.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigatio...

APSB23-73 : Security update available for Adobe Substance3D Stager

Adobe has released an update for Adobe Substance 3D Stager. This update addresses important vulnerabilities in Adobe Substance 3D Stager. Successful exploitation could lead to memory leak in the context of the current user...

PT-2023-8592 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.1.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the memory, which could allow an attacker to gain unauthorized access to protected information by using a special...

The vulnerability of the Substance 3D Stager software lies in its ability to read beyond the buffer limit, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Substance 3D Stager software lies in the use of an uninitialized pointer, which allows a hacker to exploit the system and disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to disclose confidential information...