Out-of-Bounds Read Vulnerability in Substance3D Stager by Adobe

CVE-2025-61806

What is CVE-2025-61806?

Substance3D Stager versions 3.1.4 and earlier are prone to an out-of-bounds read vulnerability when processing specifically crafted files. This flaw may enable attackers to read memory contents beyond the allocated structure's limit, which could lead to potential code execution within the context of the user operating the software. The exploitation of this vulnerability necessitates user interaction, as the victim must open a compromised file to trigger the attack. Awareness and prompt action are essential to mitigate the risks associated with this vulnerability.

References