Product:
Substance3D – Stager
Summary
Substance3D – Stager versions 3.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-54237 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious file that, when opened by the victim using the affected version of Substance3D – Stager, triggers the out-of-bounds read. This requires the victim to be tricked into opening the file, which then allows the attacker to access sensitive information from the victim’s system.
Affected Products
- Substance3D – Stager versions 3.1.3 and earlier: These versions are vulnerable to an out-of-bounds read that can lead to memory exposure.
Mitigation
Users are advised to update to the latest version of Substance3D – Stager to mitigate this vulnerability. Additionally, users should avoid opening files from untrusted sources to reduce the risk of exploitation.