ZDI-CAN-20359: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-29282

Summary

A significant out-of-bounds write vulnerability exists in Adobe Substance 3D Painter versions 8.3.0 and earlier. This security issue allows malicious actors to execute arbitrary code in the context of the current user, but successful exploitation requires the user to open a specially crafted file. Users are advised to remain vigilant and avoid opening untrusted files to mitigate the risks associated with this flaw.

References