HIGH
Substance3D - Painter | Out-of-bounds Write (CWE-787)
Published Nov 12, 2024
7.8
HIGHCVSS 3.1
EPSS 0.27%
Description
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products
-
- Version 0StatusaffectedConstraints<=10.1.0
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Adobe | Substance3D - Painter | affected |
|
- < 10.1.1
-
- Version 0StatusaffectedConstraints<=10.1.0
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Adobe | Substance 3d Painter | n/a |
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (1)
- https://helpx.adobe.com/security/products/substance3d_painter/apsb24-86.html vendor-advisoryVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://helpx.adobe.com/security/products/substance3d_painter/apsb24-86.html | vendor-advisoryVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner adobe
Published Nov 12, 2024
Updated Nov 12, 2024
Reserved Sep 24, 2024
Link CVE-2024-47432
CISA Vulnrichment
Updated Nov 12, 2024