Out-of-Bounds Read Vulnerability in Substance3D Painter by Adobe

CVE-2024-47437

Summary

Versions 10.1.0 and earlier of Adobe's Substance3D Painter are vulnerable to an out-of-bounds read issue, which may allow attackers to access sensitive data from memory. This vulnerability requires the user to open a specially crafted file to exploit. Successful exploitation can bypass security measures like Address Space Layout Randomization (ASLR), potentially exposing a victim's data. Users are advised to be cautious of unknown files and to update to the latest version to mitigate risks.

References