The vulnerability in Adobe Substance 3D Stager is an out‑of‑bounds read that can expose sensitive memory contents. An attacker who tricks a user into opening a maliciously crafted file could be able to read data that the application has loaded into memory, potentially revealing confidential information. The weakness is a classic input validation error (CWE-125).

Adobe Substance 3D Stager is affected. No specific product versions are listed in the public advisory; users should check the vendor for any released updates that address this issue.

The CVSS score of 5.5 indicates moderate impact. The EPSS score is reported as less than 1 percent, implying a low likelihood of widespread exploitation at present. The vulnerability is not included in the CISA KEV catalog. The attack requires user interaction: a victim must open a malicious file, which limits the attack surface to social engineering or targeted attacks rather than automated network exploitation.