Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
| Vendor | Product | Versions |
|---|---|---|
| adobe | substance3d - stager | 0 |
Updated description with more technical detail, noted that no exploit exists, and corrected patch availability to null.
Updated severity to CRITICAL, noted that no exploit exists, and added patch available version 3.1.8.
Initial creation
