Out-of-Bounds Read Vulnerability in Substance3D Painter Could Lead to Code Execution

CVE-2024-20742

What is CVE-2024-20742?

Substance3D Painter versions 9.1.1 and earlier are susceptible to an out-of-bounds read vulnerability when processing specially crafted files. This vulnerability allows attackers to potentially read past the end of allocated memory structures, creating opportunities for code execution within the context of the affected user's session. Exploitation of this vulnerability necessitates user interaction, as it requires the victim to open a crafted malicious file. Users should exercise caution when handling files from unknown sources to mitigate potential security risks.

References