Description
Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Adobe | Substance3D - Designer | affected |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-18465 | Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
References
History
Fri, 06 Dec 2024 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Adobe
Adobe substance 3d Designer |
|
| CPEs | cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Adobe
Adobe substance 3d Designer |
MITRE
Status: PUBLISHED
Assigner: adobe
Published:
Updated: 2024-08-01T21:59:42.867Z
Reserved: 2023-12-04T16:52:22.975Z
Link: CVE-2024-20750
Vulnrichment
Updated: 2024-08-01T21:59:42.867Z
NVD
Status : Analyzed
Published: 2024-02-15T13:15:49.427
Modified: 2024-12-06T14:51:42.167
Link: CVE-2024-20750
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses