CVE-2026-103836

CVE-2026-103836 · Substance3D - Stager | Out-of-bounds Write (CWE-787)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 7.8 · High · EPSS 0.1% · Fix available

Published

2026-10-13T19:59:59.676Z

Updated

2026-10-15T10:31:16.205Z

Check your server →