CVE-2026-21343: Substance3D - Stager | Out-of-bounds Read (CWE-125)
Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21343?
CVE-2026-21343 has a medium severity rating due to the potential for an out-of-bounds read leading to information exposure.
How do I fix CVE-2026-21343?
To fix CVE-2026-21343, you should update Substance3D - Stager to version 3.1.7 or later.
What types of attacks can exploit CVE-2026-21343?
CVE-2026-21343 can potentially be exploited by attackers through specially crafted files that lead to out-of-bounds memory access.
Which versions of Substance3D - Stager are affected by CVE-2026-21343?
Substance3D - Stager versions 3.1.6 and earlier are affected by CVE-2026-21343.
Is user interaction required to exploit CVE-2026-21343?
Yes, user interaction is required to trigger CVE-2026-21343 since the vulnerability is exploited through file parsing.