ZDI-CAN-20365: Adobe Substance 3D Painter USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-29284

Summary

Adobe Substance 3D Painter versions 8.3.0 and earlier contain a stack-based buffer overflow vulnerability, potentially allowing an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, the targeted user must open a specially crafted malicious file. This poses a significant risk to users who interact with untrusted files, making it crucial to apply security updates promptly. Refer to the official Adobe advisory for further details and remediation steps.

References