CVE Catalog

CVE-2025-61833

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.24%

14th percentile - higher than 14% of all known CVEs

Summary

An out-of-bounds read vulnerability in Substance3D - Stager versions 3.1.5 and earlier when parsing a crafted file could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation requires user interaction, as the victim must open a malicious file.

Risk Assessment

Opening a crafted file in the application may lead to execution of malicious code with the user's privileges, risking data and system compromise.

Recommendation

Update Substance3D - Stager to the latest version and avoid opening files from untrusted sources.

Other vulnerabilities in Substance3D - Stager

See all
Original NVD description (English source)

Substance3D - Stager versions 3.1.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS