Out-of-Bounds Read Vulnerability in Adobe Substance3D Stager

CVE-2024-52998

Summary

Substance3D Stager is vulnerable to an out-of-bounds read issue, primarily affecting versions 3.0.2 and earlier. This security flaw could potentially allow unauthorized disclosure of sensitive memory, exposing critical information. Exploitation of this vulnerability requires user interaction; specifically, a victim must open a specially crafted malicious file. Attackers may leverage this weakness to bypass security mitigations, including Address Space Layout Randomization (ASLR), thereby increasing the risk of further exploitation.

References