CVE-2023-26403: 
Adobe Substance 3D Stager vulnerability analysis and mitigation

Adobe Substance 3D Stager version 2.0.1 and earlier versions are affected by an out-of-bounds read vulnerability that was disclosed on April 11, 2023. This vulnerability requires user interaction, specifically opening a malicious file, to be exploited (Adobe Advisory).

The vulnerability is classified as an out-of-bounds read vulnerability (CWE-125) that could lead to disclosure of sensitive memory. The severity is rated as MEDIUM with a CVSS v3.1 base score of 5.5 (Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). This indicates that the vulnerability requires local access and user interaction, with potential high impact on confidentiality but no impact on integrity or availability (NVD).

If successfully exploited, this vulnerability could lead to the disclosure of sensitive memory information. Additionally, an attacker could leverage this vulnerability to bypass security mitigations such as Address Space Layout Randomization (ASLR) (Adobe Advisory).

Adobe has addressed this vulnerability in versions after 2.0.1 of Substance 3D Stager. Users are advised to update to the latest version of the software to mitigate this security risk (Adobe Advisory).