PatchTheCVEsubstance 3d stager vulnerabilities and fixes
Recent CVEs affecting substance 3d stager, with upgrade or downgrade steps. 13 tracked.
Also searched as: substance3dstager.
substance 3d stager has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 13. Most recent: 2026-10-13. Highest priority: CVE-2026-103843 (score 29/100).
- CVE-2026-103843 HIGH 7.8 UPGRADE Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code executi
- CVE-2026-103842 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which cou
- CVE-2026-103841 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which cou
- CVE-2026-103840 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which cou
- CVE-2026-103839 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code e
- CVE-2026-103838 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code e
- CVE-2026-103837 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code e
- CVE-2026-103836 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code e
- CVE-2026-103835 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code e
- CVE-2026-103834 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code e
- CVE-2026-103833 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code e
- CVE-2026-103832 HIGH 7.8 UPGRADE Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code e
- CVE-2026-103830 HIGH 7.8 UPGRADE Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary
FAQ
How do I fix substance 3d stager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is substance 3d stager being exploited right now?
None of the tracked substance 3d stager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which substance 3d stager CVE should I patch first?
CVE-2026-103843 currently ranks highest (29/100): Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code executi.