Out-of-Bounds Write Vulnerability in Substance3D Stager by Adobe

CVE-2025-21132

What is CVE-2025-21132?

Adobe Substance3D Stager versions 3.0.4 and earlier are susceptible to an out-of-bounds write vulnerability, allowing potential attackers to execute arbitrary code within the context of the current user. The exploitation of this vulnerability necessitates user interaction, as a victim must open a specially crafted malicious file. This security flaw poses significant risks to users if they engage with untrusted files, highlighting the importance of secure file handling practices.

References