CVE-2026-21345

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.6 and earlier

Description A flaw exists in Substance3D - Stager that involves an out-of-bounds read when processing a specially crafted file. This could allow an attacker to read beyond the boundaries of allocated memory. Successful exploitation requires a user to open a malicious file and may lead to code execution with the current user's privileges.

Recommendations Update Substance3D - Stager to a version later than 3.1.6.