Arbitrary Code Execution Vulnerability in Substance3D Painter Could Lead to User Data Theft

CVE-2024-30307

Summary

Adobe Substance3D Painter versions 9.1.2 and earlier are susceptible to an out-of-bounds write vulnerability that allows for arbitrary code execution in the context of the current user. This vulnerability requires user interaction, as exploitation involves opening a specially crafted malicious file. Users of affected versions should exercise caution and ensure that their copies of Substance3D Painter are updated to mitigate potential risks.

References