ZDI-CAN-20310: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-26398

What is CVE-2023-26398?

Adobe Substance 3D Designer, up to version 12.4.0, contains an out-of-bounds read vulnerability. This occurs when the application processes a specially crafted file, potentially permitting an attacker to read data beyond the allocated memory buffer. The exploitation of this vulnerability necessitates that a user interacts with a malicious file, thereby increasing the risk of arbitrary code execution in the context of the user. It is crucial for users to be vigilant and avoid opening suspicious files that may exploit this security issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References