Out-of-Bounds Write Vulnerability in Substance3D - Stager by Adobe
CVE-2026-103834

7.8HIGH

Key Information:

Vendor

Adobe
Status
Adobe Substance 3d Stager
Vendor
CVE Published:
13 October 2026

What is CVE-2026-103834?

Adobe Substance3D - Stager is susceptible to an out-of-bounds write vulnerability that allows for arbitrary code execution within the current user context. Exploitation necessitates user interaction, as it requires the victim to open a specially crafted malicious file. This vulnerability poses potential risks if proper security measures are not adhered to, highlighting the need for users to remain vigilant when handling files from untrusted sources.

Affected Version(s)

Adobe Substance 3D Stager 0 <= 3.1.8

Adobe Substance 3D Stager 3.1.9

References

https://www.adobe.com/trust/security/products/substance3d...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.