Out-of-Bounds Read Vulnerability in Substance3D Painter by Adobe

CVE-2024-47436

Summary

Substance3D Painter, specifically versions 10.1.0 and earlier, is susceptible to an out-of-bounds read vulnerability. This flaw may enable attackers to disclose sensitive memory data by leveraging user interaction through malicious file handling. The vulnerability bypasses common mitigations such as Address Space Layout Randomization (ASLR), emphasizing the need for users to exercise caution when opening files from untrusted sources.

References