Substance3D - Stager vulnerabilities
25 known CVE vulnerabilities in Substance3D - Stager, translated and rated.
- CVE-2026-103852Medium
Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application. Exploitation requires user interaction, as a victim must open a malicious file.
- CVE-2026-103851High
Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file.
- CVE-2026-103850Medium
Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction, as a victim must open a malicious file.
- CVE-2026-103843High
Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
- CVE-2026-103842High
Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
- CVE-2026-103841High
Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
- CVE-2026-103840High
Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
- CVE-2026-103839High
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
- CVE-2026-103838High
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
- CVE-2026-103837High
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
- CVE-2026-103836High
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
- CVE-2026-103835High
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
- CVE-2026-103834High
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
- CVE-2026-103833High
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
- CVE-2026-103832High
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
- CVE-2026-103830High
A stack-based buffer overflow vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
- CVE-2026-21287High
Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction – the victim must open a malicious file.
- CVE-2025-64531High
A use-after-free vulnerability in Substance3D - Stager versions 3.1.5 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file.
- CVE-2025-61835High
An Integer Underflow (Wrap or Wraparound) vulnerability in Substance3D - Stager versions 3.1.5 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as the victim must open a malicious file.
- CVE-2025-61834High
Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file.
- CVE-2025-61833High
An out-of-bounds read vulnerability in Substance3D - Stager versions 3.1.5 and earlier when parsing a crafted file could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation requires user interaction, as the victim must open a malicious file.
- CVE-2025-61807High
An Integer Overflow or Wraparound vulnerability in Substance3D - Stager versions 3.1.4 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — the victim must open a malicious file.
- CVE-2025-61806High
An out-of-bounds read vulnerability in Substance3D - Stager versions 3.1.4 and earlier when parsing a crafted file could result in a read past the end of an allocated memory structure. An attacker could leverage this to execute code in the context of the current user. Exploitation requires user interaction — the victim must open a malicious file.
- CVE-2025-61805High
An out-of-bounds read vulnerability in Substance3D - Stager versions 3.1.4 and earlier when parsing a crafted file could result in a read past the end of an allocated memory structure. An attacker could leverage this to execute code in the context of the current user. Exploitation requires user interaction — the victim must open a malicious file.
- CVE-2025-61803High
An Integer Overflow or Wraparound vulnerability in Substance3D - Stager versions 3.1.4 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as the victim must open a malicious file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

