CVE-2023-25872

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Stager versions 2.0.0 and earlier

Description The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a victim must open a malicious file. This allows an attacker to potentially execute arbitrary code using a specially crafted file.

Recommendations For Adobe Substance 3D Stager versions 2.0.0 and earlier, update to a version that is not affected by this issue. As a temporary workaround, consider avoiding the use of SVG files from untrusted sources to minimize the risk of exploitation. Restrict access to potentially malicious files to prevent the execution of arbitrary code.