Heap-based Buffer Overflow in Substance3D Painter by Adobe

CVE-2024-47431

Summary

A Heap-based Buffer Overflow vulnerability exists in Adobe Substance3D Painter, specifically in versions 10.1.0 and earlier. This vulnerability allows for arbitrary code execution within the context of the current user. Successful exploitation of this issue necessitates user interaction, as it requires the victim to open a specially crafted malicious file. This underscores the importance of remaining vigilant about file origins and the potential risks associated with executing unknown or untrusted files in affected versions.

References