ZDI-CAN-20312: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-26411

What is CVE-2023-26411?

Adobe Substance 3D Designer versions 12.4.0 and earlier exhibit a vulnerability that allows for an out-of-bounds read when processing a specifically crafted file. This flaw could lead to unintended code execution within the user's context. To exploit this issue, an attacker must persuade a victim to open a malicious file, thereby increasing the risk to user data and application integrity. Users are advised to remain cautious and update to secure versions.

References