Out-of-Bounds Write Vulnerability in Substance3D Painter by Adobe

CVE-2024-49516

What is CVE-2024-49516?

The vulnerability presents an out-of-bounds write issue in Substance3D Painter versions up to 10.1.0. Exploitation of this flaw may allow for arbitrary code execution within the context of a user. Successful exploitation necessitates user interaction, specifically requiring that the user opens a specially crafted malicious file. As a result, this could pose a significant risk to user systems, emphasizing the need for caution when interacting with potentially harmful files.

References