Memory Manipulation in Substance3D Painter by Adobe

CVE-2024-47438

What is CVE-2024-47438?

Substance3D Painter, developed by Adobe, is vulnerable to a Write-what-where condition present in versions 10.1.0 and earlier. This flaw permits an attacker to manipulate memory contents by writing a controlled value at a specified memory location. The exploitation of this vulnerability can lead to the exposure of sensitive memory data. Importantly, the successful execution of this attack requires that the user opens a malicious file, making user awareness and vigilance critical.

References