Out-of-Bounds Write Vulnerability in Substance3D Designer Could Lead to Arbitrary Code Execution

CVE-2024-41864

Summary

The vulnerability in Substance3D Designer versions 13.1.2 and earlier allows for an out-of-bounds write condition. This security flaw can potentially enable arbitrary code execution within the context of the current user. Successful exploitation necessitates user interaction, specifically requiring the victim to open a specially crafted malicious file. Users of affected versions are advised to apply necessary patches and remain vigilant against suspicious files to mitigate the associated risks.

References