Substance3D Painter Vulnerability Could Lead to Arbitrary Code Execution

CVE-2024-53958

Summary

An out-of-bounds write vulnerability has been identified in Adobe's Substance3D Painter, affecting versions 10.1.1 and prior. This vulnerability allows for arbitrary code execution in the context of the current user when a malicious file is opened. Exploitation necessitates user interaction, which can lead to severe security risks, highlighting the importance of vigilance when handling files from untrusted sources. Users are advised to update to the latest version to mitigate this security risk.

References