Adobe Substance 3D Stager

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:substance_3d_stager:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductSubstance 3D Stager (1954b29f-0fcc-5aa6-9a25-cb5619c35ed6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45152 vulnerable 2026-06-08 06:45:55.440549 Substance3D - Stager | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-10-09T13:28:42.865Z
Updated: 2024-10-09T17:49:28.114Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45143 vulnerable 2026-06-08 06:45:55.412017 Substance3D - Stager | Heap-based Buffer Overflow (CWE-122)
HIGH (7.8)
Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-10-09T13:28:44.409Z
Updated: 2024-10-09T17:31:08.870Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45142 vulnerable 2026-06-08 06:45:55.411489 Substance3D - Stager | Write-what-where Condition (CWE-123)
HIGH (7.8)
Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition vulnerability that could allow an attacker to execute arbitrary code in the context of the current user. This vulnerability allows an attacker to write a controlled value to an arbitrary memory location, potentially leading to code execution. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-10-09T13:28:45.183Z
Updated: 2024-10-09T17:29:06.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45141 vulnerable 2026-06-08 06:45:55.410929 Substance3D - Stager | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-10-09T13:28:43.640Z
Updated: 2024-10-09T17:41:32.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45138 vulnerable 2026-06-08 06:45:55.407214 Substance3D - Stager | Use After Free (CWE-416)
HIGH (7.8)
Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-10-09T13:28:45.937Z
Updated: 2024-10-09T15:56:01.678Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.