Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability Leading to Memory Leak

A memory leak vulnerability due to an out-of-bounds read has been identified in Adobe Substance 3D Stager versions through 3.1.3. This vulnerability could allow an attacker to disclose sensitive information. Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in a memory leak, allowing for the unauthorized disclosure of sensitive information.

Remediation

Users are advised to update to Adobe Substance 3D Stager version 3.1.4. For managed environments, IT administrators can use the Adobe Admin Console to deploy Creative Cloud applications to end users.