CVE-2026-103850: Substance3D - Stager | Out-of-bounds Read (CWE-125)
Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Adobe Substance 3D Stager who open attacker-crafted malicious files are exposed. The attack requires local access and user interaction.
What does an attacker need to exploit the vulnerability?
An attacker needs to persuade a victim to open a malicious file in Substance 3D Stager. No privileges are required according to the supplied CVSS vector.
What is the likely impact of successful exploitation?
Successful exploitation could disclose sensitive information from memory. The supplied severity vector indicates high confidentiality impact, with no integrity or availability impact.