CVE-2025-21128
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 121
Summary
CVE-2025-21128 is a stack-based Buffer Overflow vulnerability affecting Substance3D's Stager software versions 3.0.4 and earlier. This issue could potentially allow an attacker to execute arbitrary code in the context of the current user. To exploit this vulnerability, a victim must open a maliciously crafted file. Successful exploitation could result in significant security implications, making it crucial for users to update their Substance3D Stager software to a secure version.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Substance 3D