Out-of-Bounds Read Vulnerability in Substance3D - Stager by Adobe
CVE-2025-61833

7.8HIGH

Key Information:

Vendor

Adobe

Vendor
CVE Published:
11 November 2025

What is CVE-2025-61833?

Substance3D - Stager versions 3.1.5 and earlier are exposed to an out-of-bounds read vulnerability when processing crafted files. This issue can lead to unintended memory access, allowing an attacker to execute code within the context of the current user. Successful exploitation necessitates that a victim opens a specially crafted file, thereby making user interaction essential for the attack to occur.

Affected Version(s)

Substance3D - Stager 0 <= 3.1.5

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-61833 : Out-of-Bounds Read Vulnerability in Substance3D - Stager by Adobe