ZDI-CAN-20363: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-29275

Summary

Adobe Substance 3D Painter versions 8.3.0 and earlier are vulnerable to an out-of-bounds read issue when processing specially crafted files. This flaw could allow an attacker to read beyond allocated memory structures, potentially facilitating code execution in the context of the current user. Exploitation of this vulnerability necessitates user interaction, as it requires the target to open a malicious file.

References