CVE-2023-25863: 
Adobe Substance 3D Stager vulnerability analysis and mitigation

Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an out-of-bounds read vulnerability when parsing crafted files. The vulnerability was discovered and disclosed in March 2023, with Adobe releasing security updates to address the issue (Adobe Advisory).

The vulnerability is classified as an out-of-bounds read issue (CWE-125) that occurs when parsing crafted files. The severity is rated as HIGH with a CVSS v3.1 base score of 7.8 (Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerability could result in a read past the end of an allocated memory structure (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute code in the context of the current user. The vulnerability affects both confidentiality and integrity of the system, with potential for high impact on system security (Adobe Advisory).

Adobe has released security updates to address this vulnerability in Substance 3D Stager. Users are advised to update to the latest version of the software to mitigate the risk (Adobe Advisory).