Arbitrary Code Execution Vulnerability in Substance3D Stager Could Lead to User Data Theft

CVE-2024-34115

Summary

Adobe Substance3D Stager versions 2.1.4 and earlier contain an out-of-bounds write vulnerability that poses a severe risk by allowing arbitrary code execution in the context of the current user. This security flaw necessitates user action, as exploitation occurs when a user opens a specially crafted malicious file. Proper attention to this vulnerability is critical to maintain system security and prevent potential attacks.

References