Substance3D - Painter | Out-of-bounds Write (CWE-787)

CVE-2024-49519

Summary

The vulnerability in Adobe Substance3D Painter is characterized by an out-of-bounds write issue that permits arbitrary code execution in the context of the user. This security flaw necessitates user action, as an attacker must convince the user to open a specially crafted malicious file. The exploitation of this vulnerability raises significant concerns for users, particularly those utilizing affected versions, as it could lead to unauthorized operations on their systems.

References