Out-of-Bounds Write Vulnerability in Substance3D Painter by Adobe

CVE-2024-47432

Summary

Substance3D Painter, a product developed by Adobe, is affected by a vulnerability that allows for out-of-bounds write operations in its architecture. This issue exists in versions 10.1.0 and earlier, posing a risk for users who may unwittingly open compromised files. Successfully exploiting this vulnerability requires user interaction; thus, a user must open a malicious file. If exploited, it could lead to arbitrary code execution within the security context of the affected user, highlighting the importance of caution when handling potentially harmful files.

References