Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-47438 EUVD-2024-42464GHSA-4jqw-mwqp-mhq2

Substance3D - Painter | Write-what-where Condition (CWE-123)

Published Nov 12, 2024 · Updated Nov 12, 2024 · Assigned by adobe

Description

Substance3D - Painter versions 10.1.0 and earlier are affected by a Write-what-where Condition vulnerability that could lead to a memory leak. This vulnerability allows an attacker to write a controlled value at a controlled memory location, which could result in the disclosure of sensitive memory content. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

VendorProductAffectedFixed
Adobe Substance3D - Painter ≤ 10.1.0 —

Advisories 1

References