Threat database

Adobe Substance 3D Stager contains a NULL Pointer Dereference vulnerability that can cause the application to crash, resulting in a denial-of-service condition. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS score is 5.5, indicating medium severity.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. No patch information is provided, and no known exploits are reported in the wild.

Adobe Substance 3D Stager contains an out-of-bounds read vulnerability (CWE-125) when parsing specially crafted files. This flaw could allow an attacker to read memory beyond allocated bounds, potentially leading to code execution under the current user's privileges. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS score is 7.8, indicating high severity.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS score is 7.8, indicating high severity.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. No patch information is provided, and no known exploits are reported in the wild.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The issue has a high severity rating with a CVSS score of 7.8.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS 3.1 base score is 7.8, indicating a high severity issue.

Adobe Substance 3D Stager contains an out-of-bounds read vulnerability (CWE-125) when parsing specially crafted files. This flaw can cause the application to read beyond allocated memory, potentially allowing an attacker to execute code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS score is 7.8, indicating a high severity level.

Adobe Substance 3D Stager contains an out-of-bounds read vulnerability (CWE-125) that may allow an attacker to disclose sensitive memory contents. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS score is 5.5 (medium severity), indicating a moderate risk primarily impacting confidentiality without affecting integrity or availability.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS 3.1 base score is 7.8, indicating a high severity issue.

Adobe Substance 3D Stager contains a stack-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. Exploitation requires user interaction. The vulnerability has a high severity rating with a CVSS score of 7.8.

Adobe Substance 3D Stager contains an out-of-bounds read vulnerability (CWE-125) when parsing specially crafted files. This flaw can lead to reading beyond allocated memory, potentially allowing an attacker to execute code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe Substance 3D Stager contains a stack-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability affects versions from 0 up to and including 3.1.8. Exploitation requires user interaction. The vulnerability has a high severity rating with a CVSS score of 7.8.

Adobe Substance 3D Stager contains a Use After Free vulnerability (CWE-416) that may allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS v3.1 base score is 7.8, indicating high severity.

Adobe Dimension contains a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This flaw allows a local attacker with user permissions to execute arbitrary code in the context of the current user. Exploitation requires user interaction, specifically that the victim runs the application. The vulnerability affects Adobe Dimension versions from 0 up to and including 4.1.8. The vulnerability has a high severity rating with a CVSS score of 8.6.

Adobe Dimension contains an Uncontrolled Search Path Element vulnerability (CWE-427) that allows a local attacker with user permissions to execute arbitrary code by tricking a user into running the application. The vulnerability affects versions from 0 up to and including 4.1.8. Exploitation requires user interaction and changes the security scope. The CVSS 3.1 score is 8.6, indicating a high severity risk.

Adobe Dimension contains a NULL Pointer Dereference vulnerability (CWE-476) that can cause the application to crash, resulting in denial-of-service. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 4.1.8. The CVSS score is 5.5, indicating medium severity.

Adobe Dimension contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 4.1.8. The CVSS 3.1 base score is 7.8, indicating high severity.