ZDI-CAN-20372: Adobe Substance 3D Painter PLY File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

CVE-2023-29280

Summary

Adobe Substance 3D Painter versions 8.3.0 and earlier contain an out-of-bounds read vulnerability triggered when parsing specially crafted files. This flaw may allow attackers to read past allocated memory, potentially enabling code execution within the context of the user. Notably, successful exploitation necessitates user interaction, as a targeted victim must open the crafted malicious file to activate the vulnerability.

References