Out-of-Bounds Read Vulnerability in Substance3D Modeler Could Lead to Memory Disclosure

CVE-2024-53005

Summary

An out-of-bounds read vulnerability exists in Adobe Substance3D Modeler that affects versions 1.14.1 and earlier. This vulnerability can allow an attacker to disclose sensitive information from the application’s memory space. The exploitation of this vulnerability requires user interaction, specifically, a victim must open a specially crafted malicious file, which could potentially lead to bypassing memory protection mechanisms such as Address Space Layout Randomization (ASLR). This security issue underscores the importance of maintaining updated software and practicing caution when opening files from untrusted sources.

References