This vulnerability is a stack-based buffer overflow that allows an attacker to achieve arbitrary code execution in the context of the current user. The flaw is identified by CWE-121 and could enable malicious code to run with the victim's privileges when a crafted file is processed. It is not a denial‑of‑service issue but a full compromise of code execution, making it highly detrimental once triggered.

The affected product is Adobe Substance 3D Stager, as supplied by Adobe. No version information was included in the advisory, meaning all publicly available releases that have not been patched are potentially vulnerable.

The CVSS score of 7.8 severity vulnerability. The EPSS score is listed as less than 1 percent, implying that real‑world exploitation likelihood is very low at present, and it is not catalogued in CISA's KEV list. The description states that an attacker must rely on a victim opening a malicious file, so user interaction is required. Based on the description, it is inferred that the attack vector is the accidental or deliberate opening of a crafted 3D file by an end user. Once this occurs, an attacker can run arbitrary code, which could lead to system compromise or further lateral movement.