Heap-based Buffer Overflow in Substance3D Sampler by Adobe

CVE-2024-52995

Summary

The Substance3D Sampler software produced by Adobe contains a vulnerability characterized as a Heap-based Buffer Overflow in versions 4.5.1 and earlier. This security issue can potentially allow an attacker to execute arbitrary code within the context of the user currently operating the software. Successful exploitation necessitates user interaction, specifically requiring the user to open a malicious file crafted to trigger the memory overflow. This vulnerability poses significant risks, emphasizing the importance of user awareness and software updates to mitigate such threats.

References