PT-2026-7423 · Adobe · Substance3D - Stager

Jann Horn · Publicado 2026-02-10 · Atualizado 2026-02-10 · CVE-2026-21342

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.6 and earlier

Description The software contains a flaw that allows for writing data outside the intended memory boundaries. Successful exploitation of this issue could lead to arbitrary code execution with the privileges of the current user. User interaction is required for exploitation, specifically, a user must open a specially crafted malicious file.

Recommendations Update Substance3D - Stager to a version later than 3.1.6.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

BDU:2026-01893

CVE-2026-21342

Produtos afetados

Substance3D - Stager

Referências · 5

• https://osv.dev/vulnerability/CVE-2026-21342 · Aviso do Fabricante
• https://helpx.adobe.com/security/products/substance3d_stager/apsb26-20.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-21342 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2021342273582084573 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-01893 · Nota de Segurança