CVE-2026-103843
CVE-2026-103843 · Substance3D - Stager | Use After Free (CWE-416)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS 7.8 · High · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
adobe substance 3d stager
- Versions
- ≥ 0, ≤ 3.1.8: Affected (semver)
- 3.1.9: Not affected (semver)
Update to 3.1.9