Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Adobe |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-39238 | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 14 Aug 2024 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Adobe
Adobe substance 3d Sampler |
|
| CPEs | cpe:2.3:a:adobe:substance_3d_sampler:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Adobe
Adobe substance 3d Sampler |
|
| Metrics |
ssvc
|
Wed, 14 Aug 2024 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |
| Title | Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD file | |
| Weaknesses | CWE-125 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published:
Updated: 2024-08-14T14:26:30.891Z
Reserved: 2024-07-22T17:16:40.939Z
Link: CVE-2024-41861
Vulnrichment
Updated: 2024-08-14T14:26:13.957Z
NVD
Status : Analyzed
Published: 2024-08-14T09:15:13.100
Modified: 2024-08-14T18:19:54.043
Link: CVE-2024-41861
Redhat
No data.
OpenCVE Enrichment
No data.