Out-of-Bounds Read Vulnerability in Substance3D Stager by Adobe
CVE-2025-61806
What is CVE-2025-61806?
Substance3D Stager versions 3.1.4 and earlier are prone to an out-of-bounds read vulnerability when processing specifically crafted files. This flaw may enable attackers to read memory contents beyond the allocated structure's limit, which could lead to potential code execution within the context of the user operating the software. The exploitation of this vulnerability necessitates user interaction, as the victim must open a compromised file to trigger the attack. Awareness and prompt action are essential to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Substance3D - Stager 0 <= 3.1.4
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved