ZDI-CAN-20317: Adobe Substance 3D Designer DAE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-26415

What is CVE-2023-26415?

Adobe Substance 3D Designer versions 12.4.0 and earlier contain an out-of-bounds write vulnerability that enables arbitrary code execution within the context of the current user. The exploitation pathway necessitates user interaction, as the targeted individual must open a specially crafted file designed to trigger the flaw. This could lead to severe security implications, highlighting the need for users to be vigilant when dealing with untrusted files.

References