Arbitrary Code Execution Vulnerability in Substance3D Painter Could Lead to User Data Theft

CVE-2024-20744

Summary

An out-of-bounds write vulnerability exists in Adobe Substance3D Painter versions 9.1.1 and earlier. This flaw can lead to arbitrary code execution within the context of the current user, posing significant security risks. Successful exploitation necessitates user interaction, as the victim must open a specially crafted malicious file. Users of affected versions are encouraged to implement the latest security updates and to exercise caution when handling untrusted files.

References