Out-of-Bounds Read Vulnerability in Substance3D - Stager by Adobe

CVE-2026-103842

What is CVE-2026-103842?

Adobe Substance3D - Stager is susceptible to an out-of-bounds read vulnerability when processing specially crafted files. This flaw allows unauthorized access to memory, potentially enabling an attacker to execute arbitrary code within the context of the current user. The exploitation of this vulnerability necessitates user interaction, specifically that the victim opens a file designed to trigger this vulnerability. Users are advised to take precautions and avoid opening suspicious files until a patch is available.

References