CVE-2026-103839
CVE-2026-103839 · Substance3D - Stager | Out-of-bounds Write (CWE-787)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS 7.8 · High · EPSS 0.1%
- Published
- Updated
Affected products and versions
adobe substance 3d stager
- Versions
- ≥ 0, ≤ 3.1.8: Affected (semver)
- 3.1.9: Not affected (semver)
No fix published