Out-of-Bounds Read Vulnerability in Substance3D Designer Could Lead to Code Execution

CVE-2024-20750

Summary

Substance3D Designer versions 13.1.0 and earlier are prone to an out-of-bounds read vulnerability. This issue arises when the application processes a specially crafted file, potentially allowing data to be read beyond the allocated memory structure. Exploitation requires the target user to open the compromised file, enabling an attacker to execute arbitrary code within the user's context. Users are advised to exercise caution and only open files from trusted sources.

References