Heap-based Buffer Overflow in Substance3D Stager by Adobe
CVE-2024-45139

7.8HIGH

Key Information:

Vendor

Adobe
Status
Substance 3d Stager
Vendor
CVE Published:
9 October 2024

What is CVE-2024-45139?

Substance3D Stager versions 3.0.3 and earlier exhibit a Heap-based Buffer Overflow vulnerability, enabling potential arbitrary code execution through user interaction. This exploitation requires the user to open a specially crafted malicious file, putting their system at risk of unauthorized actions executed in the context of the current user. Addressing this vulnerability promptly is crucial for maintaining software integrity and user safety.

References

https://helpx.adobe.com/security/products/substance3d_sta...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.