CVE Catalog

CVE-2025-64531

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.22%

11th percentile - higher than 11% of all known CVEs

Summary

A use-after-free vulnerability in Substance3D - Stager versions 3.1.5 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file.

Risk Assessment

Opening a crafted file may allow an attacker to execute malicious code with the user's privileges on a workstation with Stager installed.

Recommendation

Update Substance3D - Stager to the latest version and avoid opening files from untrusted sources.

Other vulnerabilities in Substance3D - Stager

See all
Original NVD description (English source)

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS