Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Adobe Substance3D - Stager — helpx.adobe.com/security/products/substance3d_stager/apsb25… Clear all filters
TI-2025-38223 CVE-2025-61835 · GHSA-f7cq-chwc-qw8x

Substance3D - Stager | Integer Underflow (Wrap or Wraparound) (CWE-191)

Priority LOW 36

Substance3D - Stager versions 3.1.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00237 Published 2025-11-11 No fix listed CWE-191
TI-2025-38221 CVE-2025-61833 · GHSA-f6ph-54f3-6j6v

Substance3D - Stager | Out-of-bounds Read (CWE-125)

Priority LOW 36

Substance3D - Stager versions 3.1.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00237 Published 2025-11-11 No fix listed CWE-125
TI-2025-39921 CVE-2025-64531 · GHSA-jv36-777x-f845

Substance3D - Stager | Use After Free (CWE-416)

Priority LOW 35

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00216 Published 2025-11-11 No fix listed CWE-416
TI-2025-38222 CVE-2025-61834 · GHSA-hmrg-p593-v6r5

Substance3D - Stager | Use After Free (CWE-416)

Priority LOW 36

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00248 Published 2025-11-11 No fix listed CWE-416