CVE-2026-103830: Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)
Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Adobe Substance 3D Stager are exposed if they open a malicious file. Successful exploitation runs code in the context of the user who opens it.
What does an attacker need to exploit it?
An attacker needs to provide a malicious file and convince a victim to open it in Substance 3D Stager. The vulnerability does not require attacker privileges on the target system.
What is the impact if exploitation succeeds?
The stack-based buffer overflow could allow arbitrary code execution with the permissions of the current user. This can affect confidentiality, integrity, and availability.