Unrated severityNVD Advisory· Published Nov 12, 2024· Updated Nov 12, 2024
Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)
CVE-2024-49517
Description
Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products
2- Range: <=10.1.0
- Adobe/Substance3D - Painterv5Range: 0
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/substance3d_painter/apsb24-86.htmlmitrevendor-advisory
News mentions
0No linked articles in our index yet.