Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

CVE-2024-49525

What is CVE-2024-49525?

Substance3D Painter, developed by Adobe, has been identified to have a Heap-based Buffer Overflow vulnerability in versions 10.1.0 and earlier. This flaw allows for potential arbitrary code execution within the context of the current user. Exploitation necessitates user interaction, specifically requiring the victim to open a malicious file. Given the nature of this vulnerability, it poses significant risks for users who handle unverified or suspicious files, urging the need for vigilance and prompt updates to the latest software versions.

References