CVE-2024-30309

Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:adobe:substance_3d_painter:*:*:*:*:*:*:*:*

History

02 Dec 2024, 22:25

Type Values Removed Values Added
CPE cpe:2.3:a:adobe:substance_3d_painter:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 5.5
v2 : unknown
v3 : unknown
First Time Adobe substance 3d Painter
Adobe
CWE CWE-125
References () https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html - () https://helpx.adobe.com/security/products/substance3d_painter/apsb24-31.html - Vendor Advisory

16 May 2024, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-16 09:15

Updated : 2024-12-02 22:25


NVD link : CVE-2024-30309

Mitre link : CVE-2024-30309


JSON object : View

Products Affected

adobe

  • substance_3d_painter
CWE

No CWE.