CVE-2026-103830: Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)
Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
Who is exposed to this issue?
Users of Adobe Substance 3D Stager are exposed if they open a malicious file. Successful exploitation runs code in the context of the user who opens it.
What does an attacker need to exploit it?
An attacker needs to provide a malicious file and convince a victim to open it in Substance 3D Stager. The vulnerability does not require attacker privileges on the target system.
What is the impact if exploitation succeeds?
The stack-based buffer overflow could allow arbitrary code execution with the permissions of the current user. This can affect confidentiality, integrity, and availability.