Integer Overflow Vulnerability in Substance3D Stager by Adobe
CVE-2025-61803

7.8HIGH

Key Information:

Vendor

Adobe

Vendor
CVE Published:
14 October 2025

What is CVE-2025-61803?

The Substance3D Stager, developed by Adobe, is prone to an integer overflow vulnerability that may allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation of this vulnerability necessitates user interaction, as it occurs when a user opens a specially crafted malicious file. Affected versions include Substance3D Stager 3.1.4 and prior releases. Users are advised to exercise caution and ensure they update their software promptly to mitigate risk.

Affected Version(s)

Substance3D - Stager 0 <= 3.1.4

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-61803 : Integer Overflow Vulnerability in Substance3D Stager by Adobe