Out-of-Bounds Read Vulnerability in Adobe Substance3D Painter

CVE-2024-47440

Summary

Adobe Substance3D Painter versions up to 10.1.0 experience an out-of-bounds read vulnerability, potentially allowing unauthorized access to sensitive memory. An attacker could exploit this flaw by enticing a user to open a specially crafted file, which could facilitate bypassing security features like Address Space Layout Randomization (ASLR). This emphasizes the importance of safeguarding user interactions and ensuring that any file accessed is from a trusted source.

References