Heap-based Buffer Overflow in Substance3D Painter by Adobe
CVE-2024-47431

7.8HIGH

Key Information:

Vendor

Adobe
Status
Substance 3d Painter
Vendor
CVE Published:
12 November 2024

What is CVE-2024-47431?

A Heap-based Buffer Overflow vulnerability exists in Adobe Substance3D Painter, specifically in versions 10.1.0 and earlier. This vulnerability allows for arbitrary code execution within the context of the current user. Successful exploitation of this issue necessitates user interaction, as it requires the victim to open a specially crafted malicious file. This underscores the importance of remaining vigilant about file origins and the potential risks associated with executing unknown or untrusted files in affected versions.

References

https://helpx.adobe.com/security/products/substance3d_pai...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.