Out-of-Bounds Write Vulnerability in Substance3D Painter by Adobe
CVE-2024-47429

7.8HIGH

Key Information:

Vendor
Adobe
Status
Substance 3d Painter
Vendor
CVE Published:
12 November 2024

Summary

Substance3D Painter, a software product by Adobe, is susceptible to an out-of-bounds write vulnerability present in versions 10.1.0 and earlier. This vulnerability may enable attackers to execute arbitrary code within the context of the user operating the software. Exploiting this issue necessitates user interaction; specifically, a victim must open a maliciously crafted file to trigger the vulnerability. Users are encouraged to apply the latest security updates to mitigate the risk associated with this issue.

References

https://helpx.adobe.com/security/products/substance3d_pai...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.