Arbitrary Code Execution Vulnerability in Substance3D Painter Could Lead to User Data Theft

CVE-2024-30274

Summary

Substance3D Painter versions 9.1.2 and earlier are susceptible to an out-of-bounds write vulnerability that could allow an attacker to execute arbitrary code on the affected system. This issue arises when a victim interacts with a malicious file, which could lead to the execution of harmful operations in the context of the current user. User awareness and incident response strategies are essential to mitigate the risks associated with this vulnerability.

References