CVE Catalog

CVE-2025-61834

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.25%

15th percentile - higher than 15% of all known CVEs

Summary

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file.

Risk Assessment

The vulnerability could allow arbitrary code execution on the user's computer if a crafted file is opened. This poses a risk to confidentiality, integrity, and availability of data.

Recommendation

Update Substance3D - Stager to a version later than 3.1.5. Avoid opening files from unknown sources.

Other vulnerabilities in Substance3D - Stager

See all
Original NVD description (English source)

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS