ZDI-CAN-20310: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-26398

Summary

Adobe Substance 3D Designer, up to version 12.4.0, contains an out-of-bounds read vulnerability. This occurs when the application processes a specially crafted file, potentially permitting an attacker to read data beyond the allocated memory buffer. The exploitation of this vulnerability necessitates that a user interacts with a malicious file, thereby increasing the risk of arbitrary code execution in the context of the user. It is crucial for users to be vigilant and avoid opening suspicious files that may exploit this security issue.

References