CVE-2026-103851: Stack-based Buffer Overflow (CWE-121) in Adobe Adobe Substance 3D Stager

CVE-2026-103851 is a stack-based buffer overflow vulnerability (CWE-121) in Adobe Substance 3D Stager. This flaw can be exploited when a user opens a crafted malicious file, potentially leading to arbitrary code execution within the context of the current user. The vulnerability affects all versions from 0 through 3.1.8 inclusive. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported, and no vendor patch or advisory links are provided in the data.

Successful exploitation could result in arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. User interaction is required, limiting the attack vector to scenarios where a victim opens a malicious file. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources to avoid triggering the vulnerability.