Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: Adobe Substance3D - Stager — helpx.adobe.com/security/products/substance3d_stager/apsb25… Clear all filters
TI-2025-28264 CVE-2025-43569 · GHSA-g3mw-9fh5-mrhx

Substance3D - Stager | Out-of-bounds Write (CWE-787)

Priority LOW 35

Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00225 Published 2025-05-13 No fix listed CWE-787
TI-2025-28266 CVE-2025-43571 · GHSA-g4xf-2jx5-c6mr

Substance3D - Stager | Use After Free (CWE-416)

Priority LOW 36

Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00272 Published 2025-05-13 No fix listed CWE-416
TI-2025-28265 CVE-2025-43570 · GHSA-75pf-6v46-5v63

Substance3D - Stager | Use After Free (CWE-416)

Priority LOW 36

Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00272 Published 2025-05-13 No fix listed CWE-416
TI-2025-28247 CVE-2025-43551 · GHSA-2c88-8r97-2vcx

Substance3D - Stager | Out-of-bounds Read (CWE-125)

Priority LOW 24

Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00229 Published 2025-05-13 No fix listed CWE-125
TI-2025-28263 CVE-2025-43568 · GHSA-43ff-74cr-2r98

Substance3D - Stager | Use After Free (CWE-416)

Priority LOW 36

Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00272 Published 2025-05-13 No fix listed CWE-416
TI-2025-28245 CVE-2025-43549 · GHSA-w8jh-376c-cw53

Substance3D - Stager | Use After Free (CWE-416)

Priority LOW 36

Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00272 Published 2025-05-13 No fix listed CWE-416