Out-of-Bounds Read Vulnerability in Substance3D Painter by Adobe
CVE-2024-47437

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Substance 3d Painter
Vendor
CVE Published:
12 November 2024

What is CVE-2024-47437?

Versions 10.1.0 and earlier of Adobe's Substance3D Painter are vulnerable to an out-of-bounds read issue, which may allow attackers to access sensitive data from memory. This vulnerability requires the user to open a specially crafted file to exploit. Successful exploitation can bypass security measures like Address Space Layout Randomization (ASLR), potentially exposing a victim's data. Users are advised to be cautious of unknown files and to update to the latest version to mitigate risks.

References

https://helpx.adobe.com/security/products/substance3d_pai...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.