CVE-2024-30308

Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:adobe:substance_3d_painter:*:*:*:*:*:*:*:*

History

02 Dec 2024, 22:25

Type Values Removed Values Added
CWE CWE-125
First Time Adobe substance 3d Painter
Adobe
CPE cpe:2.3:a:adobe:substance_3d_painter:*:*:*:*:*:*:*:*
References () https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html - () https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html - Vendor Advisory
CVSS v2 : unknown
v3 : 5.5
v2 : unknown
v3 : unknown

16 May 2024, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-16 09:15

Updated : 2024-12-02 22:25


NVD link : CVE-2024-30308

Mitre link : CVE-2024-30308


JSON object : View

Products Affected

adobe

  • substance_3d_painter
CWE

No CWE.